mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 01:26:42 +03:00
30 lines
944 B
Python
30 lines
944 B
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Copyright (c) 2006-2024 sqlmap developers (https://sqlmap.org/)
|
|
See the file 'LICENSE' for copying permission
|
|
"""
|
|
|
|
from lib.core.enums import PRIORITY
|
|
|
|
__priority__ = PRIORITY.LOWEST
|
|
|
|
def dependencies():
|
|
pass
|
|
|
|
def tamper(payload, **kwargs):
|
|
"""
|
|
Replaces apostrophe character (') with its UTF-8 full width counterpart (e.g. ' -> %EF%BC%87)
|
|
|
|
References:
|
|
* http://www.utf8-chartable.de/unicode-utf8-table.pl?start=65280&number=128
|
|
* https://web.archive.org/web/20130614183121/http://lukasz.pilorz.net/testy/unicode_conversion/
|
|
* https://web.archive.org/web/20131121094431/sla.ckers.org/forum/read.php?13,11562,11850
|
|
* https://web.archive.org/web/20070624194958/http://lukasz.pilorz.net/testy/full_width_utf/index.phps
|
|
|
|
>>> tamper("1 AND '1'='1")
|
|
'1 AND %EF%BC%871%EF%BC%87=%EF%BC%871'
|
|
"""
|
|
|
|
return payload.replace('\'', "%EF%BC%87") if payload else payload
|