wafamole.payloadfuzzer package

Submodules

wafamole.payloadfuzzer.fuzz_utils module

wafamole.payloadfuzzer.fuzz_utils.filter_candidates(symbols, payload)

It removes all the symbols that are not contained inside the input payload string.

Parameters:

• symbols (dict) – dictionary of symbols to filter (using the key)
• payload (str) – the payload to use for the filtering

Raises:

TypeError – bad types passed as argument

Returns:

a list containing all the symbols that are contained inside the payload.

Return type:

list

wafamole.payloadfuzzer.fuzz_utils.num_contradiction()

Returns a random contradiction explicit using numbers chosen from a fixed set.

Returns:string containing a contradiction Return type:(str)

wafamole.payloadfuzzer.fuzz_utils.num_tautology()

Returns a random tautology explicit using numbers chosen from a fixed set.

Returns:string containing a tautology Return type:(str)

wafamole.payloadfuzzer.fuzz_utils.random_char(spaces=True)

Returns a random character.

Keyword Arguments:  spaces (bool) – include spaces [default = True] Raises:TypeError – spaces not bool Returns:random character Return type:str

wafamole.payloadfuzzer.fuzz_utils.random_string(max_len=5, spaces=True)

It creates a random string.

Keyword Arguments:  

• max_length (int) – the maximum length of the string [default=5]
• spaces (bool) – if True, all the printable character will be considered. Else, only letters and digits [default=True]

Raises:

TypeError – bad type passed as argument

Returns:

random string

Return type:

(str)

wafamole.payloadfuzzer.fuzz_utils.replace_nth(candidate, sub, wanted, n)

Replace the n-th occurrence of a portion of the candidate with wanted.

Parameters:

• candidate (str) – the string to be modified
• sub (str) – regexp containing what to substitute
• wanted (str) – the string that will replace sub
• n (int) – the index of the occurrence to replace

Raises:

TypeError – bad type passed as arguments

Returns:

the modified string

Return type:

(str)

wafamole.payloadfuzzer.fuzz_utils.replace_random(candidate, sub, wanted)

Replace one picked at random of the occurrence of sub inside candidate with wanted.

Parameters:

• candidate (str) – the string to be modified
• sub (str) – regexp containing what to substitute
• wanted (str) – the string that will replace sub

Raises:

TypeError – bad type passed as arguments

Returns:

the modified string

Return type:

(str)

wafamole.payloadfuzzer.fuzz_utils.string_contradiction()

Returns a random contradiction chosen from a fixed set.

Returns:string containing a contradiction Return type:(str)

wafamole.payloadfuzzer.fuzz_utils.string_tautology()

Returns a random tautology chosen from a fixed set.

Returns:string containing a tautology Return type:(str)

wafamole.payloadfuzzer.sqlfuzzer module

Strategies and fuzzer class module

class wafamole.payloadfuzzer.sqlfuzzer.SqlFuzzer(payload)

Bases: object

SqlFuzzer class

current()

fuzz()

reset()

strategies = [<function spaces_to_comments>, <function random_case>, <function swap_keywords>, <function swap_int_repr>, <function spaces_to_whitespaces_alternatives>, <function comment_rewriting>, <function change_tautologies>, <function logical_invariant>, <function reset_inline_comments>, <function shuffle_integers>]

wafamole.payloadfuzzer.sqlfuzzer.change_tautologies(payload)

wafamole.payloadfuzzer.sqlfuzzer.comment_rewriting(payload)

wafamole.payloadfuzzer.sqlfuzzer.logical_invariant(payload)

Adds an invariant boolean condition to the payload

E.g., something OR False

Parameters:payload –

wafamole.payloadfuzzer.sqlfuzzer.random_case(payload)

wafamole.payloadfuzzer.sqlfuzzer.reset_inline_comments(payload: str)

Remove randomly chosen multi-line comment content. :param payload: query payload string

Returns:payload modified Return type:str

wafamole.payloadfuzzer.sqlfuzzer.shuffle_integers(payload)

Replace number=number or number LIKE number cases with a digit + letter combination of the number’s size

e.g. SELECT admins FROM (SELECT * FROM user WHERE 1782 LIKE 1782) WHERE 999=122 could become SELECT admins FROM (SELECT * FROM user WHERE a1H9 LIKE a1H9) WHERE 999=122

Parameters:payload –

wafamole.payloadfuzzer.sqlfuzzer.spaces_to_comments(payload)

wafamole.payloadfuzzer.sqlfuzzer.spaces_to_whitespaces_alternatives(payload)

wafamole.payloadfuzzer.sqlfuzzer.swap_int_repr(payload)

wafamole.payloadfuzzer.sqlfuzzer.swap_keywords(payload)

Module contents