(payload, **kwargs)
return retVal
Replaces each keyword character with upper case value

    Tested against:
        * Microsoft SQL Server 2005
        * MySQL 4, 5.0 and 5.5
        * Oracle 10g
        * PostgreSQL 8.3, 8.4, 9.0

    Notes:
        * Useful to bypass very weak and bespoke web application firewalls
          that has poorly written permissive regular expressions
        * This tamper script should work against all (?) databases

    >>> tamper('insert')
    'INSERT'
Replaces each keyword character with upper case value
Replaces each keyword character with upper case value
def tamper(payload, **kwargs):
    """
    Replaces each keyword character with upper case value

    Tested against:
        * Microsoft SQL Server 2005
        * MySQL 4, 5.0 and 5.5
        * Oracle 10g
        * PostgreSQL 8.3, 8.4, 9.0

    Notes:
        * Useful to bypass very weak and bespoke web application firewalls
          that has poorly written permissive regular expressions
        * This tamper script should work against all (?) databases

    >>> tamper('insert')
    'INSERT'
    """

    retVal = payload

    if payload:
        for match in re.finditer(r"[A-Za-z_]+", retVal):
            word = match.group()

            if word.upper() in kb.keywords:
                retVal = retVal.replace(word, word.upper())

    return retVal
def tamper ( payload , * * kwargs ) : retVal = payload if payload : for match in re . finditer ( r"[A-Za-z_]+" , retVal ) : word = match . group ( ) if word . upper ( ) in kb . keywords : retVal = retVal . replace ( word , word . upper ( ) ) return retVal