diff --git a/lib/core/settings.py b/lib/core/settings.py index 8d07f9ac8..c83967de1 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.2.4" +VERSION = "1.6.2.5" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/tamper/ord2ascii.py b/tamper/ord2ascii.py index 06ea3794e..3f6c2a57b 100644 --- a/tamper/ord2ascii.py +++ b/tamper/ord2ascii.py @@ -9,7 +9,7 @@ import re from lib.core.enums import PRIORITY -__priority__ = PRIORITY.LOWEST +__priority__ = PRIORITY.HIGHEST def dependencies(): pass @@ -18,6 +18,9 @@ def tamper(payload, **kwargs): """ Replaces ORD() occurences with equivalent ASCII() calls + Requirement: + * MySQL + >>> tamper("ORD('42')") "ASCII('42')" """ @@ -25,6 +28,6 @@ def tamper(payload, **kwargs): retVal = payload if payload: - retVal = re.sub(r"(?i)\bORD\(\b", "ASCII(", payload) + retVal = re.sub(r"(?i)\bORD\(", "ASCII(", payload) return retVal