From 13bf338f86f1c127f48b1487db9ba5014be8a1c5 Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Thu, 28 Aug 2014 11:58:22 +0200
Subject: [PATCH] Implementation for an Issue #806

---
 tamper/overlongutf8.py | 45 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 tamper/overlongutf8.py

diff --git a/tamper/overlongutf8.py b/tamper/overlongutf8.py
new file mode 100644
index 000000000..2723cb004
--- /dev/null
+++ b/tamper/overlongutf8.py
@@ -0,0 +1,45 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2014 sqlmap developers (http://sqlmap.org/)
+See the file 'doc/COPYING' for copying permission
+"""
+
+import string
+
+from lib.core.enums import PRIORITY
+
+__priority__ = PRIORITY.LOWEST
+
+def dependencies():
+    pass
+
+def tamper(payload, **kwargs):
+    """
+    Converts all characters in a given payload (not processing already
+    encoded)
+
+    Reference: https://www.acunetix.com/vulnerabilities/unicode-transformation-issues/
+
+    >>> tamper('SELECT FIELD FROM TABLE WHERE 2>1')
+    'SELECT%C0%AAFIELD%C0%AAFROM%C0%AATABLE%C0%AAWHERE%C0%AA2%C0%BE1'
+    """
+
+    retVal = payload
+
+    if payload:
+        retVal = ""
+        i = 0
+
+        while i < len(payload):
+            if payload[i] == '%' and (i < len(payload) - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits:
+                retVal += payload[i:i + 3]
+                i += 3
+            else:
+                if payload[i] not in (string.ascii_letters + string.digits):
+                    retVal += "%%C0%%%.2X" % (0x8A | ord(payload[i]))
+                else:
+                    retVal += payload[i]
+                i += 1
+
+    return retVal