update to tamper scripts, using kwargs instead of warning

This commit is contained in:
ekultek 2017-10-31 13:17:33 -05:00
parent fec7935d42
commit 29b2ad69e2
6 changed files with 26 additions and 7 deletions

View file

@ -6,7 +6,8 @@ from lib.core.settings import (
)
def tamper(payload, warning=True, **kwargs):
def tamper(payload, **kwargs):
warning = kwargs.get("warning", True)
if warning:
logger.warning(set_color(
"base64 tamper scripts may increase the possibility of not finding vulnerabilities "

View file

@ -6,7 +6,9 @@ from lib.core.settings import (
)
def tamper(payload, warning=True, **kwargs):
def tamper(payload, **kwargs):
warning = kwargs.get("warning", True)
if warning:
logger.warning(set_color(
"enclosing brackets is meant to be used as an obfuscation "

View file

@ -4,7 +4,8 @@ from lib.core.settings import (
)
def tamper(payload, warning=True, **kwargs):
def tamper(payload, **kwargs):
warning = kwargs.get("warning", True)
if warning:
logger.warning(set_color(
"hex tamper scripts may increase the risk of false positives...", level=30

View file

@ -4,7 +4,9 @@ from lib.core.settings import (
)
def tamper(payload, warning=True, **kwargs):
def tamper(payload, **kwargs):
warning = kwargs.get("warning", True)
if warning:
logger.warning(set_color(
"obfuscating the payloads by ordinal equivalents may increase the risk "

View file

@ -1,4 +1,17 @@
from lib.core.settings import (
logger,
set_color
)
def tamper(payload, **kwargs):
warning = kwargs.get("warning", True)
if warning:
logger.warning(set_color(
"NULL encoding tamper scripts may increase the possibility of not finding vulnerabilities "
"in otherwise vulnerable sites...", level=30
))
retval = ""
encoder = "%00"
for char in payload:

View file

@ -3,10 +3,10 @@
def tamper(payload, safe="%&=-_", **kwargs):
encodings = {
" ": "%20", "!": "%21", '"': "%22", "#": "%23", "$": "%24", "%": "%25", "&": "%26", "'": "%27",
"(": "%28", ")": "%29", "*": "%2A", "+": "%2B", ",": "%2C", "-": "%2D", ".": "%2E", "/": "%2F",
" ": "%20", "!": "%21", '"': "%22", "#": "%23", "$": "%24", "%": "%25", "'": "%27",
"(": "%28", ")": "%29", "*": "%2A", "+": "%2B", ",": "%2C", ".": "%2E", "/": "%2F",
"0": "%30", "1": "%31", "2": "%32", "3": "%33", "4": "%34", "5": "%35", "6": "%36", "7": "%37",
"8": "%38", "9": "%39", ":": "%3A", ";": "%3B", "<": "%3C", "=": "%3D", ">": "%3E", "?": "%3F",
"8": "%38", "9": "%39", ":": "%3A", ";": "%3B", "<": "%3C", ">": "%3E", "?": "%3F",
"@": "%40", "A": "%41", "B": "%42", "C": "%43", "D": "%44", "E": "%45", "F": "%46", "G": "%47",
"H": "%48", "I": "%49", "J": "%4A", "K": "%4B", "L": "%4C", "M": "%4D", "N": "%4E", "O": "%4F",
"P": "%50", "Q": "%51", "R": "%52", "S": "%53", "T": "%54", "U": "%55", "V": "%56", "W": "%57",