2017-10-10 22:59:01 +00:00
|
|
|
from lib.core.settings import (
|
|
|
|
|
logger,
|
|
|
|
|
set_color
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
2017-10-31 18:17:33 +00:00
|
|
|
def tamper(payload, **kwargs):
|
|
|
|
|
warning = kwargs.get("warning", True)
|
|
|
|
|
|
2017-10-10 22:59:01 +00:00
|
|
|
if warning:
|
|
|
|
|
logger.warning(set_color(
|
|
|
|
|
"obfuscating the payloads by ordinal equivalents may increase the risk "
|
2017-12-07 13:27:20 +00:00
|
|
|
"of false positives", level=30
|
2017-10-10 22:59:01 +00:00
|
|
|
))
|
|
|
|
|
|
|
|
|
|
retval = ""
|
|
|
|
|
danger_characters = "%&<>/\\;'\""
|
|
|
|
|
for char in payload:
|
|
|
|
|
if char in danger_characters:
|
|
|
|
|
char = "%{}".format(ord(char) * 10 / 7)
|
|
|
|
|
retval += char
|
|
|
|
|
else:
|
|
|
|
|
retval += char
|
|
|
|
|
return retval
|