mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-09 06:01:29 +00:00
Adding escapequotes.py (utility tamper script)
This commit is contained in:
26
tamper/escapequotes.py
Normal file
26
tamper/escapequotes.py
Normal file
@@ -0,0 +1,26 @@
|
||||
#!/usr/bin/env python
|
||||
|
||||
"""
|
||||
Copyright (c) 2006-2016 sqlmap developers (http://sqlmap.org/)
|
||||
See the file 'doc/COPYING' for copying permission
|
||||
"""
|
||||
|
||||
import base64
|
||||
|
||||
from lib.core.enums import PRIORITY
|
||||
from lib.core.settings import UNICODE_ENCODING
|
||||
|
||||
__priority__ = PRIORITY.LOWEST
|
||||
|
||||
def dependencies():
|
||||
pass
|
||||
|
||||
def tamper(payload, **kwargs):
|
||||
"""
|
||||
Slash escape quotes (' and ")
|
||||
|
||||
>>> tamper("1' AND SLEEP(5)#")
|
||||
'1\' AND SLEEP(5)#'
|
||||
"""
|
||||
|
||||
return payload.replace("'", "\\'").replace('"', '\\"')
|
||||
Reference in New Issue
Block a user