Improve IDS/IPS evasion support

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

http://sqlmap.org

Other

32.28k stars 5.69k forks source link

Open bdamele opened 12 years ago

bdamele commented 12 years ago

Add more tamper scripts (e.g. ability to test for addslahes bypasses using big5 or GBK characters).
Suggest tamper scripts in due course following fingerprint of technology, back-end DBMS, etc.

References:

stamparm commented 7 years ago

As of HTTP Parameter Pollution it is already implemented with --hpp:

$ python sqlmap.py -hh | grep hpp
    --hpp               Use HTTP parameter pollution method