CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-21 11:13:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Minor update

Browse source
This commit is contained in:
Miroslav Štampar 2026-06-12 11:32:01 +02:00
parent fc16a8e120
commit 1d1725f920
4 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tamper/hex2char.py
View file

@ -39,7 +39,7 @@ def tamper(payload, **kwargs):
retVal = payload
if payload:
for match in re.finditer(r"\b0x([0-9a-f]+)\b", retVal):
for match in re.finditer(r"(?i)\b0x([0-9a-f]+)\b", retVal):
if len(match.group(1)) > 2:
result = "CONCAT(%s)" % ','.join("CHAR(%d)" % _ for _ in getOrds(decodeHex(match.group(1))))
else:

4
tamper/unionalltounion.py
View file

@ -5,6 +5,8 @@ Copyright (c) 2006-2026 sqlmap developers (https://sqlmap.org)
See the file 'LICENSE' for copying permission
"""
import re
from lib.core.enums import PRIORITY
__priority__ = PRIORITY.HIGHEST
@ -20,4 +22,4 @@ def tamper(payload, **kwargs):
'-1 UNION SELECT'
"""
return payload.replace("UNION ALL SELECT", "UNION SELECT") if payload else payload
return re.sub(r"(?i)UNION\s+ALL\s+SELECT", "UNION SELECT", payload) if payload else payload