add ord2ascii tamper script (#4992)

jeffbencteux · web-flow · commit a4cf25c97dc4 · 2022-02-23T12:11:27.000+01:00
Changes occurrences of ORD() function to equivalent ASCII() ones.
diff --git a/tamper/ord2ascii.py b/tamper/ord2ascii.py
@@ -0,0 +1,30 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2022 sqlmap developers (https://sqlmap.org/)
+See the file 'LICENSE' for copying permission
+"""
+
+import re
+
+from lib.core.enums import PRIORITY
+
+__priority__ = PRIORITY.LOWEST
+
+def dependencies():
+    pass
+
+def tamper(payload, **kwargs):
+    """
+    Replaces ORD() occurences with equivalent ASCII() calls 
+
+    >>> tamper("ORD('42')")
+    "ASCII('42')"
+    """
+
+    retVal = payload
+
+    if payload:
+        retVal = re.sub(r"(?i)\bORD\(\b", "ASCII(", payload)
+
+    return retVal
