mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-01-21 21:59:20 +00:00
Another update for an Issue #352 and couple of fixes
This commit is contained in:
@@ -20,15 +20,15 @@ def tamper(payload, **kwargs):
|
||||
"""
|
||||
Adds multiple spaces around SQL keywords
|
||||
|
||||
Example:
|
||||
* Input: UNION SELECT
|
||||
* Output: UNION SELECT
|
||||
|
||||
Notes:
|
||||
* Useful to bypass very weak and bespoke web application firewalls
|
||||
that has poorly written permissive regular expressions
|
||||
|
||||
Reference: https://www.owasp.org/images/7/74/Advanced_SQL_Injection.ppt
|
||||
|
||||
>>> random.seed(0)
|
||||
>>> tamper('1 UNION SELECT foobar')
|
||||
'1 UNION SELECT foobar'
|
||||
"""
|
||||
|
||||
retVal = payload
|
||||
|
||||
Reference in New Issue
Block a user