sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 01:26:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor refactoring

Browse Source
This commit is contained in:
Miroslav Stampar 2012-07-24 01:21:32 +02:00
parent b820975217
commit 7f4fa7c27d
11 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tamper/apostrophemask.py
View File

@ -27,4 +27,4 @@ def tamper(payload):
* http://lukasz.pilorz.net/testy/full_width_utf/index.phps
"""
return payload.replace('\'', '%EF%BC%87') if payload else payload
return payload.replace('\'', "%EF%BC%87") if payload else payload

2
tamper/apostrophenullencode.py
View File

@ -21,4 +21,4 @@ def tamper(payload):
* Output: AND %00%271%00%27=%00%271%00%27
"""
return payload.replace('\'', '%00%27') if payload else payload
return payload.replace('\'', "%00%27") if payload else payload

2
tamper/chardoubleencode.py
View File

@ -40,7 +40,7 @@ def tamper(payload):
retVal += payload[i:i+3]
i += 3
else:
retVal += '%%25%X' % ord(payload[i])
retVal += '%%25%.2X' % ord(payload[i])
i += 1
return retVal

2
tamper/charencode.py
View File

@ -47,7 +47,7 @@ def tamper(payload):
retVal += payload[i:i+3]
i += 3
else:
retVal += '%%%X' % ord(payload[i])
retVal += '%%%.2X' % ord(payload[i])
i += 1
return retVal

2
tamper/charunicodeencode.py
View File

@ -52,7 +52,7 @@ def tamper(payload):
retVal += "%%u00%s" % payload[i+1:i+3]
i += 3
else:
retVal += '%%u00%X' % ord(payload[i])
retVal += '%%u%.4X' % ord(payload[i])
i += 1
return retVal

2
tamper/equaltolike.py
View File

@ -38,7 +38,7 @@ def tamper(payload):
def process(match):
word = match.group()
word = "%sLIKE%s" % (" " if word[0]!=" " else "", " " if word[-1]!=" " else "")
word = "%sLIKE%s" % (" " if word[0] != " " else "", " " if word[-1] != " " else "")
return word

16
tamper/ifnull2ifisnull.py
View File

@ -36,27 +36,27 @@ def tamper(payload):
if payload and payload.find("IFNULL") > -1:
while payload.find("IFNULL(") > -1:
index = payload.find("IFNULL(")
deepness = 1
depth = 1
comma, end = None, None
for i in xrange(index + len("IFNULL("), len(payload)):
if deepness == 1 and payload[i] == ',':
if depth == 1 and payload[i] == ',':
comma = i
elif deepness == 1 and payload[i] == ')':
elif depth == 1 and payload[i] == ')':
end = i
break
elif payload[i] == '(':
deepness += 1
depth += 1
elif payload[i] == ')':
deepness -= 1
depth -= 1
if comma and end:
A = payload[index + len("IFNULL("):comma]
B = payload[comma + 1:end]
newVal = "IF(ISNULL(%s),%s,%s)" % (A, B, A)
_ = payload[index + len("IFNULL("):comma]
__ = payload[comma + 1:end]
newVal = "IF(ISNULL(%s),%s,%s)" % (_, __, _)
payload = payload[:index] + newVal + payload[end+1:]
else:
break

6
tamper/randomcase.py
View File

@ -43,11 +43,11 @@ def tamper(payload):
word = match.group()
if word.upper() in kb.keywords:
newWord = str()
_ = str()
for i in xrange(len(word)):
newWord += word[i].upper() if randomRange(0, 1) else word[i].lower()
_ += word[i].upper() if randomRange(0, 1) else word[i].lower()
retVal = retVal.replace(word, newWord)
retVal = retVal.replace(word, _)
return retVal

8
tamper/randomcomments.py
View File

@ -29,12 +29,12 @@ def tamper(payload):
continue
if word.upper() in kb.keywords:
newWord = word[0]
_ = word[0]
for i in xrange(1, len(word) - 1):
newWord += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])
_ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])
newWord += word[-1]
retVal = retVal.replace(word, newWord)
_ += word[-1]
retVal = retVal.replace(word, _)
return retVal

2
tamper/space2mssqlblank.py
View File

@ -53,7 +53,7 @@ def tamper(payload):
# CR 0D carriage return
# SO 0E shift out
# SI 0F shift in
blanks = ['%01', '%02', '%03', '%04', '%05', '%06', '%07', '%08', '%09', '%0B', '%0C', '%0D', '%0E', '%0F', '%0A']
blanks = ('%01', '%02', '%03', '%04', '%05', '%06', '%07', '%08', '%09', '%0B', '%0C', '%0D', '%0E', '%0F', '%0A')
retVal = payload
if payload:

2
tamper/space2mysqlblank.py
View File

@ -43,7 +43,7 @@ def tamper(payload):
# CR 0D carriage return
# VT 0B vertical TAB (MySQL and Microsoft SQL Server only)
# - A0 - (MySQL only)
blanks = ['%09', '%0A', '%0C', '%0D', '%0B', '%A0']
blanks = ('%09', '%0A', '%0C', '%0D', '%0B', '%A0')
retVal = payload
if payload: