sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-10-31 07:57:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

implemented first usable tamper module

Browse Source
This commit is contained in:
Miroslav Stampar 2010-10-13 13:07:44 +00:00
parent 562df9c107
commit 2dc297530a
1 changed files with 30 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
tamper/ifnull2ifisnull.py
View File

@ -1,11 +1,34 @@
import re
#not finished (watch for number of parenthesis)
#IFNULL(A,B) -> IF(ISNULL(A),B,A)
from lib.core.convert import urldecode
from lib.core.convert import urlencode
"""
Tampering IFNULL(A,B) -> IF(ISNULL(A),B,A)
"""
def tamper(place, value):
if value:
if value.find("IFNULL") > -1:
import pdb
pdb.set_trace()
value = re.sub(r"IFNULL(\(|%28)(?P<A>.+?)(,|%2C)(?P<B>.+?)(\)|%29)", lambda match: "IF%%28ISNULL%%28%s%%29%%2C%s%%2C%s%%29" % ("A="+match.group("A"), "B="+match.group("B"), "A="+match.group("A")), value)
if value and value.find("IFNULL") > -1:
if place != "URI":
value = urldecode(value)
#value = re.sub(r"IFNULL\(\({%d}(?P<A>.+?)\){%d},(?P<B>.+?)\)" % (num, num), lambda match: "IF(ISNULL(%s),%s,%s)" % (match.group("A"), match.group("B"), match.group("A")), value)
while value.find("IFNULL(") > -1:
index = value.find("IFNULL(")
deepness = 1
comma, end = None, None
for i in xrange(index + len("IFNULL("), len(value)):
if deepness == 1 and value[i] == ',':
comma = i
elif deepness == 1 and value[i] == ')':
end = i
break
elif value[i] == '(':
deepness += 1
elif value[i] == ')':
deepness -= 1
A = value[index + len("IFNULL("):comma]
B = value[comma + 1:end]
newVal = "IF(ISNULL(%s),%s,%s)" % (A, B, A)
value = value[:index] + newVal + value[end+1:]
if place != "URI":
value = urlencode(value)
return value