mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-02-13 02:40:41 +03:00
For some reason this tamper script automatically adds --+ in some cases. Unless I'm mistaken, normally this is something that should be handled by the different payloads (payloads.xml). I have found cases where using this script failed because it would add --+ even though the payload was trying to use #, and the application in question was blacklisting on --. Removing these lines allowed the script to work and payloads using either -- or # should work as normal. Is there some particular reason for wanting to auto-add --+ within this tamper script? |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| apostrophemask.py | ||
| apostrophenullencode.py | ||
| appendnullbyte.py | ||
| base64encode.py | ||
| between.py | ||
| bluecoat.py | ||
| chardoubleencode.py | ||
| charencode.py | ||
| charunicodeencode.py | ||
| concat2concatws.py | ||
| equaltolike.py | ||
| greatest.py | ||
| halfversionedmorekeywords.py | ||
| ifnull2ifisnull.py | ||
| lowercase.py | ||
| modsecurityversioned.py | ||
| modsecurityzeroversioned.py | ||
| multiplespaces.py | ||
| nonrecursivereplacement.py | ||
| percentage.py | ||
| randomcase.py | ||
| randomcomments.py | ||
| securesphere.py | ||
| sp_password.py | ||
| space2comment.py | ||
| space2dash.py | ||
| space2hash.py | ||
| space2morehash.py | ||
| space2mssqlblank.py | ||
| space2mssqlhash.py | ||
| space2mysqlblank.py | ||
| space2mysqldash.py | ||
| space2plus.py | ||
| space2randomblank.py | ||
| unionalltounion.py | ||
| unmagicquotes.py | ||
| versionedkeywords.py | ||
| versionedmorekeywords.py | ||