mirror of
https://github.com/sqlmapproject/sqlmap
synced 2025-12-08 09:24:01 +01:00
new tampering module
This commit is contained in:
parent
2dc297530a
commit
e81a293d20
1 changed files with 17 additions and 0 deletions
17
tamper/space2comment.py
Normal file
17
tamper/space2comment.py
Normal file
|
|
@ -0,0 +1,17 @@
|
|||
import re
|
||||
|
||||
from lib.core.convert import urldecode
|
||||
from lib.core.convert import urlencode
|
||||
|
||||
"""
|
||||
Tampering ' ' -> /**/
|
||||
"""
|
||||
def tamper(place, value):
|
||||
if value:
|
||||
if place != "URI":
|
||||
value = urldecode(value)
|
||||
while value.find(" ") > -1:
|
||||
value = value.replace(" ", "/**/")
|
||||
if place != "URI":
|
||||
value = urlencode(value)
|
||||
return value
|
||||
Loading…
Reference in a new issue