Sqlmap Tamper



Script name: apostrophemask.py
Role: use utf8 instead of quotes
example:
("1 AND '1'='1")
'1 AND %EF%BC%871%EF%BC%87=%EF%BC%871'
Claim:
All

Script name: equaltolike.py
Role: like instead of the equal sign
example:
SELECT · FROM users WHERE id=1
SELECT · FROM users WHERE id LIKE 1
Claim:
·Microsoft SQL Server 2005
· MySQL 4, 5.0 and 5.5




Enjoy! Follow us for more...

No comments:

Post a Comment

How to connect to an FTP server from Linux?

To connect to an FTP server from a Linux system, you can use either a command-line FTP client or a graphical one. Here’s how to do it usin...