sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-19 21:10:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor refactoring

Browse Source
This commit is contained in:
Miroslav Stampar 2012-07-24 01:21:32 +02:00
parent b820975217
commit 7f4fa7c27d
11 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tamper/apostrophemask.py
View File

@ -27,4 +27,4 @@ def tamper(payload):
* http://lukasz.pilorz.net/testy/full_width_utf/index.phps * http://lukasz.pilorz.net/testy/full_width_utf/index.phps
""" """
return payload.replace('\'', '%EF%BC%87') if payload else payload return payload.replace('\'', "%EF%BC%87") if payload else payload

2
tamper/apostrophenullencode.py
View File

@ -21,4 +21,4 @@ def tamper(payload):
* Output: AND %00%271%00%27=%00%271%00%27 * Output: AND %00%271%00%27=%00%271%00%27
""" """
return payload.replace('\'', '%00%27') if payload else payload return payload.replace('\'', "%00%27") if payload else payload

2
tamper/chardoubleencode.py
View File

@ -40,7 +40,7 @@ def tamper(payload):
retVal += payload[i:i+3] retVal += payload[i:i+3]
i += 3 i += 3
else: else:
retVal += '%%25%X' % ord(payload[i]) retVal += '%%25%.2X' % ord(payload[i])
i += 1 i += 1
return retVal return retVal

2
tamper/charencode.py
View File

@ -47,7 +47,7 @@ def tamper(payload):
retVal += payload[i:i+3] retVal += payload[i:i+3]
i += 3 i += 3
else: else:
retVal += '%%%X' % ord(payload[i]) retVal += '%%%.2X' % ord(payload[i])
i += 1 i += 1
return retVal return retVal

2
tamper/charunicodeencode.py
View File

@ -52,7 +52,7 @@ def tamper(payload):
retVal += "%%u00%s" % payload[i+1:i+3] retVal += "%%u00%s" % payload[i+1:i+3]
i += 3 i += 3
else: else:
retVal += '%%u00%X' % ord(payload[i]) retVal += '%%u%.4X' % ord(payload[i])
i += 1 i += 1
return retVal return retVal

2
tamper/equaltolike.py
View File

@ -38,7 +38,7 @@ def tamper(payload):
def process(match): def process(match):
word = match.group() word = match.group()
word = "%sLIKE%s" % (" " if word[0]!=" " else "", " " if word[-1]!=" " else "") word = "%sLIKE%s" % (" " if word[0] != " " else "", " " if word[-1] != " " else "")
return word return word

16
tamper/ifnull2ifisnull.py
View File

@ -36,27 +36,27 @@ def tamper(payload):
if payload and payload.find("IFNULL") > -1: if payload and payload.find("IFNULL") > -1:
while payload.find("IFNULL(") > -1: while payload.find("IFNULL(") > -1:
index = payload.find("IFNULL(") index = payload.find("IFNULL(")
deepness = 1 depth = 1
comma, end = None, None comma, end = None, None
for i in xrange(index + len("IFNULL("), len(payload)): for i in xrange(index + len("IFNULL("), len(payload)):
if deepness == 1 and payload[i] == ',': if depth == 1 and payload[i] == ',':
comma = i comma = i
elif deepness == 1 and payload[i] == ')': elif depth == 1 and payload[i] == ')':
end = i end = i
break break
elif payload[i] == '(': elif payload[i] == '(':
deepness += 1 depth += 1
elif payload[i] == ')': elif payload[i] == ')':
deepness -= 1 depth -= 1
if comma and end: if comma and end:
A = payload[index + len("IFNULL("):comma] _ = payload[index + len("IFNULL("):comma]
B = payload[comma + 1:end] __ = payload[comma + 1:end]
newVal = "IF(ISNULL(%s),%s,%s)" % (A, B, A) newVal = "IF(ISNULL(%s),%s,%s)" % (_, __, _)
payload = payload[:index] + newVal + payload[end+1:] payload = payload[:index] + newVal + payload[end+1:]
else: else:
break break

6
tamper/randomcase.py
View File

@ -43,11 +43,11 @@ def tamper(payload):
word = match.group() word = match.group()
if word.upper() in kb.keywords: if word.upper() in kb.keywords:
newWord = str() _ = str()
for i in xrange(len(word)): for i in xrange(len(word)):
newWord += word[i].upper() if randomRange(0, 1) else word[i].lower() _ += word[i].upper() if randomRange(0, 1) else word[i].lower()
retVal = retVal.replace(word, newWord) retVal = retVal.replace(word, _)
return retVal return retVal

8
tamper/randomcomments.py
View File

@ -29,12 +29,12 @@ def tamper(payload):
continue continue
if word.upper() in kb.keywords: if word.upper() in kb.keywords:
newWord = word[0] _ = word[0]
for i in xrange(1, len(word) - 1): for i in xrange(1, len(word) - 1):
newWord += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i]) _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])
newWord += word[-1] _ += word[-1]
retVal = retVal.replace(word, newWord) retVal = retVal.replace(word, _)
return retVal return retVal

2
tamper/space2mssqlblank.py
View File

@ -53,7 +53,7 @@ def tamper(payload):
# CR 0D carriage return # CR 0D carriage return
# SO 0E shift out # SO 0E shift out
# SI 0F shift in # SI 0F shift in
blanks = ['%01', '%02', '%03', '%04', '%05', '%06', '%07', '%08', '%09', '%0B', '%0C', '%0D', '%0E', '%0F', '%0A'] blanks = ('%01', '%02', '%03', '%04', '%05', '%06', '%07', '%08', '%09', '%0B', '%0C', '%0D', '%0E', '%0F', '%0A')
retVal = payload retVal = payload
if payload: if payload:

2
tamper/space2mysqlblank.py
View File

@ -43,7 +43,7 @@ def tamper(payload):
# CR 0D carriage return # CR 0D carriage return
# VT 0B vertical TAB (MySQL and Microsoft SQL Server only) # VT 0B vertical TAB (MySQL and Microsoft SQL Server only)
# - A0 - (MySQL only) # - A0 - (MySQL only)
blanks = ['%09', '%0A', '%0C', '%0D', '%0B', '%A0'] blanks = ('%09', '%0A', '%0C', '%0D', '%0B', '%A0')
retVal = payload retVal = payload
if payload: if payload: