Sqlmap Tamper



Script name: apostrophemask.py
Role: use utf8 instead of quotes
example:
("1 AND '1'='1")
'1 AND %EF%BC%871%EF%BC%87=%EF%BC%871'
Claim:
All

Script name: equaltolike.py
Role: like instead of the equal sign
example:
SELECT · FROM users WHERE id=1
SELECT · FROM users WHERE id LIKE 1
Claim:
·Microsoft SQL Server 2005
· MySQL 4, 5.0 and 5.5




Enjoy! Follow us for more...

No comments:

Post a Comment

What is Double-testing with lookahead assertions in Regex.mp4

  Download Video :  What is Double-testing with lookahead assertions in Regex.mp4 Double-Testing with Lookahead Assertions (Regex) Double-te...