Skip to content

Instantly share code, notes, and snippets.

Last active November 11, 2018 11:03
What would you like to do?
Random Session (Sqlmap Tamper)
#!/usr/bin/env python
Copyright (c) 2006-2018 sqlmap developers (
See the file 'LICENSE' for copying permission
author: 3H34N(
import string
import random
from lib.core.enums import PRIORITY
__priority__ = PRIORITY.NORMAL
def dependencies():
def randomsession():
length = 32
chars = string.ascii_letters.lower() + string.digits
password = ''.join(random.choice(chars) for i in range(length))
return "PHPSESSID="+password
def tamper(payload, **kwargs):
Append a random session HTTP header 'PHPSESSID' to bypass
WAF (usually application based) protection
headers = kwargs.get("headers", {})
headers["Cookie"] = randomsession()
return payload
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment