diff --git a/tamper/unionalltounion.py b/tamper/unionalltounion.py new file mode 100644 index 000000000..8199702c7 --- /dev/null +++ b/tamper/unionalltounion.py @@ -0,0 +1,28 @@ +#!/usr/bin/env python + +""" +$Id$ + +Copyright (c) 2006-2012 sqlmap developers (http://www.sqlmap.org/) +See the file 'doc/COPYING' for copying permission +""" + +import re + +from lib.core.enums import PRIORITY + +__priority__ = PRIORITY.HIGHEST + +def dependencies(): + pass + +def tamper(payload): + """ + Replaces UNION ALL SELECT with UNION SELECT + + Example: + * Input: -1 UNION ALL SELECT + * Output: -1 UNION SELECT + """ + + return payload.replace("UNION ALL SELECT", "UNION SELECT") if payload else payload