
import re

from lib.core.common import randomRange
from lib.core.data import kb
from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOW

def tamper(payload, **kwargs):
    """
    Add random comments to SQL keywords

    >>> import random
    >>> random.seed(0)
    >>> tamper('INSERT')
    'I/**/N/**/SERT'
    """

    retVal = payload

    if payload:
        for match in re.finditer(r"[A-Za-z_]+", payload):
            word = match.group()

            if len(word) < 2:
                continue

            if word.upper() in kb.keywords:
                _ = word[0]

                for i in xrange(1, len(word) - 1):
                    _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])

                _ += word[-1]
                retVal = retVal.replace(word, _)

    return retVal


import re

from lib.core.common import randomRange
from lib.core.data import kb
from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOW

def tamper(payload, **kwargs):
    """
    Add random comments to SQL keywords

    >>> import random
    >>> random.seed(0)
    >>> tamper('INSERT')
    'I/**/N/**/SERT'
    """

    retVal = payload

    if payload:
        for match in re.finditer(r"\b[A-Za-z_]+\b", payload):
            word = match.group()

            if len(word) < 2:
                continue

            if word.upper() in kb.keywords:
                _ = word[0]

                for i in xrange(1, len(word) - 1):
                    _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])

                _ += word[-1]

                if "/**/" not in _:
                    index = randomRange(1, len(word) - 1)
                    _ = word[:index] + "/**/" + word[index:]

                retVal = retVal.replace(word, _)

    return retVal

Fix for a tamper script (in some cases comments were not inserted)
Fix for a tamper script (in some cases comments were not inserted)

  
  import re
  
  from lib.core.common import randomRange
  from lib.core.data import kb
  from lib.core.enums import PRIORITY
  
  __priority__ = PRIORITY.LOW
  
  def tamper(payload, **kwargs):
      """
      Add random comments to SQL keywords
  
      >>> import random
      >>> random.seed(0)
      >>> tamper('INSERT')
      'I/**/N/**/SERT'
      """
  
      retVal = payload
  
      if payload:
-         for match in re.finditer(r"[A-Za-z_]+", payload):
+         for match in re.finditer(r"\b[A-Za-z_]+\b", payload):
              word = match.group()
  
              if len(word) < 2:
                  continue
  
              if word.upper() in kb.keywords:
                  _ = word[0]
  
                  for i in xrange(1, len(word) - 1):
                      _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])
  
                  _ += word[-1]
+ 
+                 if "/**/" not in _:
+                     index = randomRange(1, len(word) - 1)
+                     _ = word[:index] + "/**/" + word[index:]
+ 
                  retVal = retVal.replace(word, _)
  
      return retVal
  
Fix for a tamper script (in some cases comments were not inserted)
## Code Before:

import re

from lib.core.common import randomRange
from lib.core.data import kb
from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOW

def tamper(payload, **kwargs):
    """
    Add random comments to SQL keywords

    >>> import random
    >>> random.seed(0)
    >>> tamper('INSERT')
    'I/**/N/**/SERT'
    """

    retVal = payload

    if payload:
        for match in re.finditer(r"[A-Za-z_]+", payload):
            word = match.group()

            if len(word) < 2:
                continue

            if word.upper() in kb.keywords:
                _ = word[0]

                for i in xrange(1, len(word) - 1):
                    _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])

                _ += word[-1]
                retVal = retVal.replace(word, _)

    return retVal

## Instruction:
Fix for a tamper script (in some cases comments were not inserted)
## Code After:

import re

from lib.core.common import randomRange
from lib.core.data import kb
from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOW

def tamper(payload, **kwargs):
    """
    Add random comments to SQL keywords

    >>> import random
    >>> random.seed(0)
    >>> tamper('INSERT')
    'I/**/N/**/SERT'
    """

    retVal = payload

    if payload:
        for match in re.finditer(r"\b[A-Za-z_]+\b", payload):
            word = match.group()

            if len(word) < 2:
                continue

            if word.upper() in kb.keywords:
                _ = word[0]

                for i in xrange(1, len(word) - 1):
                    _ += "%s%s" % ("/**/" if randomRange(0, 1) else "", word[i])

                _ += word[-1]

                if "/**/" not in _:
                    index = randomRange(1, len(word) - 1)
                    _ = word[:index] + "/**/" + word[index:]

                retVal = retVal.replace(word, _)

    return retVal
