Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 083a553

Browse files
committed
added new tamper script by request
1 parent fae0896 commit 083a553

1 file changed

Lines changed: 29 additions & 0 deletions

File tree

tamper/apostrophemask.py

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
$Id$
5+
6+
Copyright (c) 2006-2011 sqlmap developers (http://sqlmap.sourceforge.net/)
7+
See the file 'doc/COPYING' for copying permission
8+
"""
9+
10+
import string
11+
12+
from lib.core.enums import PRIORITY
13+
from lib.core.exception import sqlmapUnsupportedFeatureException
14+
15+
__priority__ = PRIORITY.LOWEST
16+
17+
def tamper(payload):
18+
"""
19+
Replaces apostrophe character with it's UTF8 fullwidth counterpart
20+
Example: "AND '1'='1'" becomes "AND %EF%BC%871%EF%BC%87=%EF%BC%871%EF%BC%87"
21+
Reference: http://www.utf8-chartable.de/unicode-utf8-table.pl?start=65280&number=128
22+
"""
23+
24+
retVal = payload
25+
26+
if payload:
27+
retVal = payload.replace('\'', '%EF%BC%87')
28+
29+
return retVal

0 commit comments

Comments
 (0)