mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
new tampering module
This commit is contained in:
17
tamper/space2comment.py
Normal file
17
tamper/space2comment.py
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
import re
|
||||||
|
|
||||||
|
from lib.core.convert import urldecode
|
||||||
|
from lib.core.convert import urlencode
|
||||||
|
|
||||||
|
"""
|
||||||
|
Tampering ' ' -> /**/
|
||||||
|
"""
|
||||||
|
def tamper(place, value):
|
||||||
|
if value:
|
||||||
|
if place != "URI":
|
||||||
|
value = urldecode(value)
|
||||||
|
while value.find(" ") > -1:
|
||||||
|
value = value.replace(" ", "/**/")
|
||||||
|
if place != "URI":
|
||||||
|
value = urlencode(value)
|
||||||
|
return value
|
||||||
Reference in New Issue
Block a user