mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-11-15 12:29:56 +00:00
Improving the auto WAF bypass feature
This commit is contained in:
parent
0ba9df2589
commit
dc42edc19f
2 changed files with 55 additions and 7 deletions
|
|
@ -20,7 +20,7 @@ from lib.core.enums import OS
|
|||
from thirdparty import six
|
||||
|
||||
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
|
||||
VERSION = "1.10.8.41"
|
||||
VERSION = "1.10.8.42"
|
||||
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
|
||||
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
|
||||
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
|
||||
|
|
@ -74,6 +74,9 @@ RATE_LIMIT_MAX_DELAY = 60.0
|
|||
# is not pre-filtered here: semantics-preservation is verified at runtime by re-running detection
|
||||
# through each candidate, so a DBMS-incompatible script simply fails the trial and is discarded.
|
||||
WAF_BYPASS_TAMPERS = (
|
||||
"castprefix",
|
||||
"mid2leftright",
|
||||
"odbcbrace",
|
||||
"equaltolike",
|
||||
"between",
|
||||
"greatest",
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue