diff --git a/tamper/charunicodeescape.py b/tamper/charunicodeescape.py index a9fb0b473..79db93960 100644 --- a/tamper/charunicodeescape.py +++ b/tamper/charunicodeescape.py @@ -31,6 +31,7 @@ def tamper(payload, **kwargs): retVal = "" i = 0 payloadLength = len(payload) + while i < payloadLength: if payload[i] == '%' and (i < payloadLength - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits: retVal += "\\u00%s" % payload[i + 1:i + 3]