From cf73d9c799e88d95487bf3ed783248695a9354b1 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 14 Oct 2010 06:40:56 +0000 Subject: [PATCH] minor update --- tamper/randomblanks.py | 13 +++++++++++++ tamper/randomcase.py | 1 + tamper/space2comment.py | 1 + 3 files changed, 15 insertions(+) create mode 100644 tamper/randomblanks.py diff --git a/tamper/randomblanks.py b/tamper/randomblanks.py new file mode 100644 index 000000000..6316dc1ab --- /dev/null +++ b/tamper/randomblanks.py @@ -0,0 +1,13 @@ +import re +import string + +from lib.core.common import randomRange +from lib.core.exception import sqlmapUnsupportedFeatureException + +""" +value -> value with inserted random blanks (e.g., INSERT->IN/**/S/**/ERT) +""" +#TODO: all +#TODO: only do it for deepness = 0 regarding '" +def tamper(place, value): + return value diff --git a/tamper/randomcase.py b/tamper/randomcase.py index a0f73ca0b..2b34e187a 100644 --- a/tamper/randomcase.py +++ b/tamper/randomcase.py @@ -7,6 +7,7 @@ from lib.core.exception import sqlmapUnsupportedFeatureException """ value -> chars from value with random case (e.g., INSERT->InsERt) """ +#TODO: only do it for deepness = 0 regarding '" def tamper(place, value): retVal = value if value: diff --git a/tamper/space2comment.py b/tamper/space2comment.py index 6bbe76138..1fc269e95 100644 --- a/tamper/space2comment.py +++ b/tamper/space2comment.py @@ -6,6 +6,7 @@ from lib.core.convert import urlencode """ ' ' -> /**/ (e.g., SELECT id FROM users->SELECT/**/id/**/FROM users) """ +#TODO: only do it for deepness = 0 regarding '" def tamper(place, value): if value: if place != "URI":