FilesExpand file tree

 master

/

appendnullbyte.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

34 lines (24 loc) · 799 Bytes

 master

/

appendnullbyte.py

Copy path

Top

File metadata and controls

• Code
• Blame

34 lines (24 loc) · 799 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

#!/usr/bin/env python

"""

Copyright (c) 2006-2012 sqlmap developers (http://sqlmap.org/)

See the file 'doc/COPYING' for copying permission

"""

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOWEST

def dependencies():

pass

def tamper(payload, headers):

"""

Appends encoded NULL byte character at the end of payload

Example:

* Input: AND 1=1

* Output: AND 1=1%00

Requirement:

* Microsoft Access

Notes:

* Useful to bypass weak web application firewalls when the back-end

database management system is Microsoft Access - further uses are

also possible

Reference: http://projects.webappsec.org/w/page/13246949/Null-Byte-Injection

"""

return "%s%%00" % payload if payload else payload, headers