diff --git a/lib/tamper_scripts/base64_encode.py b/lib/tamper_scripts/base64_encode.py index d214fb4..d76bea1 100644 --- a/lib/tamper_scripts/base64_encode.py +++ b/lib/tamper_scripts/base64_encode.py @@ -6,7 +6,8 @@ from lib.core.settings import ( ) -def tamper(payload, warning=True, **kwargs): +def tamper(payload, **kwargs): + warning = kwargs.get("warning", True) if warning: logger.warning(set_color( "base64 tamper scripts may increase the possibility of not finding vulnerabilities " diff --git a/lib/tamper_scripts/enclosebrackets_encode.py b/lib/tamper_scripts/enclosebrackets_encode.py index 3c5e633..d6f9766 100644 --- a/lib/tamper_scripts/enclosebrackets_encode.py +++ b/lib/tamper_scripts/enclosebrackets_encode.py @@ -6,7 +6,9 @@ from lib.core.settings import ( ) -def tamper(payload, warning=True, **kwargs): +def tamper(payload, **kwargs): + warning = kwargs.get("warning", True) + if warning: logger.warning(set_color( "enclosing brackets is meant to be used as an obfuscation " diff --git a/lib/tamper_scripts/hex_encode.py b/lib/tamper_scripts/hex_encode.py index 36db53b..2c8e6b7 100644 --- a/lib/tamper_scripts/hex_encode.py +++ b/lib/tamper_scripts/hex_encode.py @@ -4,7 +4,8 @@ from lib.core.settings import ( ) -def tamper(payload, warning=True, **kwargs): +def tamper(payload, **kwargs): + warning = kwargs.get("warning", True) if warning: logger.warning(set_color( "hex tamper scripts may increase the risk of false positives...", level=30 diff --git a/lib/tamper_scripts/obfuscateordinal_encode.py b/lib/tamper_scripts/obfuscateordinal_encode.py index e2dbfb8..9e5cada 100644 --- a/lib/tamper_scripts/obfuscateordinal_encode.py +++ b/lib/tamper_scripts/obfuscateordinal_encode.py @@ -4,7 +4,9 @@ from lib.core.settings import ( ) -def tamper(payload, warning=True, **kwargs): +def tamper(payload, **kwargs): + warning = kwargs.get("warning", True) + if warning: logger.warning(set_color( "obfuscating the payloads by ordinal equivalents may increase the risk " diff --git a/lib/tamper_scripts/space2null_encode.py b/lib/tamper_scripts/space2null_encode.py index 0659c31..9b7ae56 100644 --- a/lib/tamper_scripts/space2null_encode.py +++ b/lib/tamper_scripts/space2null_encode.py @@ -1,4 +1,17 @@ +from lib.core.settings import ( + logger, + set_color +) + + def tamper(payload, **kwargs): + warning = kwargs.get("warning", True) + if warning: + logger.warning(set_color( + "NULL encoding tamper scripts may increase the possibility of not finding vulnerabilities " + "in otherwise vulnerable sites...", level=30 + )) + retval = "" encoder = "%00" for char in payload: diff --git a/lib/tamper_scripts/url_encode.py b/lib/tamper_scripts/url_encode.py index 32eee14..8dd9acc 100644 --- a/lib/tamper_scripts/url_encode.py +++ b/lib/tamper_scripts/url_encode.py @@ -3,10 +3,10 @@ def tamper(payload, safe="%&=-_", **kwargs): encodings = { - " ": "%20", "!": "%21", '"': "%22", "#": "%23", "$": "%24", "%": "%25", "&": "%26", "'": "%27", - "(": "%28", ")": "%29", "*": "%2A", "+": "%2B", ",": "%2C", "-": "%2D", ".": "%2E", "/": "%2F", + " ": "%20", "!": "%21", '"': "%22", "#": "%23", "$": "%24", "%": "%25", "'": "%27", + "(": "%28", ")": "%29", "*": "%2A", "+": "%2B", ",": "%2C", ".": "%2E", "/": "%2F", "0": "%30", "1": "%31", "2": "%32", "3": "%33", "4": "%34", "5": "%35", "6": "%36", "7": "%37", - "8": "%38", "9": "%39", ":": "%3A", ";": "%3B", "<": "%3C", "=": "%3D", ">": "%3E", "?": "%3F", + "8": "%38", "9": "%39", ":": "%3A", ";": "%3B", "<": "%3C", ">": "%3E", "?": "%3F", "@": "%40", "A": "%41", "B": "%42", "C": "%43", "D": "%44", "E": "%45", "F": "%46", "G": "%47", "H": "%48", "I": "%49", "J": "%4A", "K": "%4B", "L": "%4C", "M": "%4D", "N": "%4E", "O": "%4F", "P": "%50", "Q": "%51", "R": "%52", "S": "%53", "T": "%54", "U": "%55", "V": "%56", "W": "%57",