mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 01:26:42 +03:00
new tampering module
This commit is contained in:
parent
2dc297530a
commit
e81a293d20
17
tamper/space2comment.py
Normal file
17
tamper/space2comment.py
Normal file
|
@ -0,0 +1,17 @@
|
|||
import re
|
||||
|
||||
from lib.core.convert import urldecode
|
||||
from lib.core.convert import urlencode
|
||||
|
||||
"""
|
||||
Tampering ' ' -> /**/
|
||||
"""
|
||||
def tamper(place, value):
|
||||
if value:
|
||||
if place != "URI":
|
||||
value = urldecode(value)
|
||||
while value.find(" ") > -1:
|
||||
value = value.replace(" ", "/**/")
|
||||
if place != "URI":
|
||||
value = urlencode(value)
|
||||
return value
|
Loading…
Reference in New Issue
Block a user