From e393e1b80ebf070fd283aa7f61fc1aa20f5ae105 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 23 Feb 2022 12:13:30 +0100 Subject: [PATCH] Minor update for #4992 --- lib/core/settings.py | 2 +- tamper/ord2ascii.py | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 8d07f9ac8..c83967de1 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.2.4" +VERSION = "1.6.2.5" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/tamper/ord2ascii.py b/tamper/ord2ascii.py index 06ea3794e..3f6c2a57b 100644 --- a/tamper/ord2ascii.py +++ b/tamper/ord2ascii.py @@ -9,7 +9,7 @@ import re from lib.core.enums import PRIORITY -__priority__ = PRIORITY.LOWEST +__priority__ = PRIORITY.HIGHEST def dependencies(): pass @@ -18,6 +18,9 @@ def tamper(payload, **kwargs): """ Replaces ORD() occurences with equivalent ASCII() calls + Requirement: + * MySQL + >>> tamper("ORD('42')") "ASCII('42')" """ @@ -25,6 +28,6 @@ def tamper(payload, **kwargs): retVal = payload if payload: - retVal = re.sub(r"(?i)\bORD\(\b", "ASCII(", payload) + retVal = re.sub(r"(?i)\bORD\(", "ASCII(", payload) return retVal