From 102ba181091b0609917e10291f5a1f35e7e99fe4 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 17 Sep 2020 15:06:12 +0200 Subject: [PATCH] Update sleepgetlock.py --- tamper/sleepgetlock.py | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/tamper/sleepgetlock.py b/tamper/sleepgetlock.py index c85e89929..1aa63d334 100644 --- a/tamper/sleepgetlock.py +++ b/tamper/sleepgetlock.py @@ -1,5 +1,10 @@ #!/usr/bin/env python +""" +Copyright (c) 2006-2020 sqlmap developers (http://sqlmap.org/) +See the file 'LICENSE' for copying permission +""" + from lib.core.enums import PRIORITY __priority__ = PRIORITY.HIGHEST @@ -9,7 +14,7 @@ def dependencies(): def tamper(payload, **kwargs): """ - Replaces instances like 'SLEEP(A)' with "get_lock('do9gy',A)" + Replaces instances like 'SLEEP(x)' with "get_lock('sqlmap',x)" Requirement: * MySQL @@ -21,8 +26,10 @@ def tamper(payload, **kwargs): * Useful to bypass very weak and bespoke web application firewalls that filter the SLEEP() and BENCHMARK() functions + * Reference: https://zhuanlan.zhihu.com/p/35245598 + >>> tamper('SLEEP(2)') - "get_lock('do9gy',2)" + "get_lock('sqlmap',2)" """ if payload and payload.find("SLEEP") > -1: @@ -32,8 +39,7 @@ def tamper(payload, **kwargs): num = payload[index+6] - - newVal = "get_lock('do9gy',%s)" % (num) + newVal = "get_lock('sqlmap',%s)" % (num) payload = payload[:index] + newVal + payload[index+8:]