From ca24509e19ddec799ecc51f059a805157dce5b2e Mon Sep 17 00:00:00 2001 From: neargle Date: Mon, 19 Jun 2017 22:39:09 +0800 Subject: [PATCH] append %A0 to space2mysqlblank --- tamper/space2mysqlblank.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tamper/space2mysqlblank.py b/tamper/space2mysqlblank.py index 91ac1f40c..caddab148 100644 --- a/tamper/space2mysqlblank.py +++ b/tamper/space2mysqlblank.py @@ -42,7 +42,8 @@ def tamper(payload, **kwargs): # FF 0C new page # CR 0D carriage return # VT 0B vertical TAB (MySQL and Microsoft SQL Server only) - blanks = ('%09', '%0A', '%0C', '%0D', '%0B') + # A0 non-breaking space + blanks = ('%09', '%0A', '%0C', '%0D', '%0B', '%A0') retVal = payload if payload: