sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 01:26:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1 from Mr-xn/Mr-xn-patch-1

Browse Source 
Update scientific.py
This commit is contained in:
东方有鱼名为咸 2024-03-26 23:23:31 +08:00 committed by GitHub
commit 5d3d962c02
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
tamper/scientific.py
View File

@ -6,6 +6,7 @@ See the file 'LICENSE' for copying permission
"""
import re
import random
from lib.core.enums import PRIORITY
@ -29,7 +30,9 @@ def tamper(payload, **kwargs):
"""
if payload:
payload = re.sub(r"[),.*^/|&]", r" 1.e\g<0>", payload)
payload = re.sub(r"(\w+)\(", lambda match: "%s 1.e(" % match.group(1) if not re.search(r"(?i)\A(MID|CAST|FROM|COUNT)\Z", match.group(1)) else match.group(0), payload) # NOTE: MID and CAST don't work for sure
num=random.randint(1,9999999)
payload = re.sub(r"[),.*^/|&]", r" {}.e\g<0>".format(num), payload)
num=random.randint(1,9999999)
payload = re.sub(r"(\w+)\(", lambda match: "%s %d.e(" % (match.group(1),num) if not re.search(r"(?i)\A(MID|CAST|FROM|COUNT)\Z", match.group(1)) else match.group(0), payload) # NOTE: MID and CAST don't work for sure
return payload