mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 09:36:35 +03:00
new tampering module
This commit is contained in:
parent
2dc297530a
commit
e81a293d20
17
tamper/space2comment.py
Normal file
17
tamper/space2comment.py
Normal file
|
@ -0,0 +1,17 @@
|
||||||
|
import re
|
||||||
|
|
||||||
|
from lib.core.convert import urldecode
|
||||||
|
from lib.core.convert import urlencode
|
||||||
|
|
||||||
|
"""
|
||||||
|
Tampering ' ' -> /**/
|
||||||
|
"""
|
||||||
|
def tamper(place, value):
|
||||||
|
if value:
|
||||||
|
if place != "URI":
|
||||||
|
value = urldecode(value)
|
||||||
|
while value.find(" ") > -1:
|
||||||
|
value = value.replace(" ", "/**/")
|
||||||
|
if place != "URI":
|
||||||
|
value = urlencode(value)
|
||||||
|
return value
|
Loading…
Reference in New Issue
Block a user