CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-09-01 08:41:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fixing shitty concat2concatws tamper script

Browse source
This commit is contained in:
Miroslav Štampar 2026-06-04 19:40:58 +02:00
parent 762037e78d
commit d373eeaea5
3 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tamper/concat2concatws.py
View file

@ -6,6 +6,7 @@ See the file 'LICENSE' for copying permission
"""
import os
import re
from lib.core.common import singleTimeWarnMessage
from lib.core.enums import DBMS
@ -35,6 +36,6 @@ def tamper(payload, **kwargs):
"""
if payload:
payload = payload.replace("CONCAT(", "CONCAT_WS(MID(CHAR(0),0,0),")
payload = re.sub(r"(?i)(?<!GROUP_)CONCAT\(", "CONCAT_WS(MID(CHAR(0),0,0),", payload)
return payload