tamper.c

#include "tamper.h"
#include "mem_ops.h"
#include "string_ops.h"

inline char* encode64(char* str, unsigned long len) 
{
  const char b64[64] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
                     "abcdefghijklmnopqrstuvwxyz"
                     "0123456789+/";
  char *ret, *chunk;

  chunk = xmalloc(((len + 3) << 2) / 4);
  ret=chunk;

  do {
    if (len >= 3) {
      unsigned long bitwise = (str[0] << 16) | (str[1] << 8) | str[2];

      *(chunk++) = b64[bitwise >> 18];
      *(chunk++) = b64[(bitwise >> 12) & 0x3F];
      *(chunk++) = b64[(bitwise >> 6) & 0x3F];
      *(chunk++) = b64[bitwise & 0x3F];
      len -= 3;
      str += 3;
    } else if (len == 2) {
      unsigned long bitwise = (str[0] << 16) | (str[1] << 8);
      *(chunk++) = b64[bitwise >> 18];
      *(chunk++) = b64[(bitwise >> 12) & 0x3F];
      *(chunk++) = b64[(bitwise >> 6) & 0x3D];
      *(chunk++) = '=';
      len -= 2;
      str += 2;
    } else {
      unsigned long bitwise = (str[0] << 16);;
      *(chunk++) = b64[bitwise >> 18];
      *(chunk++) = b64[(bitwise >> 12) & 0x3F];
      *(chunk++) = '=';
      *(chunk++) = '=';
      len--;
      str++;
    }
  } while(len); 
  
  *chunk=0;
/*
  if(chunk!=NULL)
  {
	free(chunk);
	chunk=NULL;
  }
*/
  return ret;
}

// random case return string, input= tomato output=ToMatO or tOmATo...
char *rand_case(char *str)
{
	char *str_new=xmalloc(sizeof(char)*strlen(str)+1);
	int i=0;
	
	while(*str != '\0')
	{
		
		if(!test_letter( *str ) )
		{
			entropy_clock();
// uppercase or lowercase condition
			if( (rand()%3) != 2)
				*(str_new+i)=*str & ~0x20;
			else
				*(str_new+i)=*str | 0x20;
	
			i++;
		} else {
			*(str_new+i)=*str;
			i++;
		}

	
		str++;	
	}

/*
	if(str_new != NULL)
	{
		free(str_new);
	}
*/
	return str_new;

}
 
char *urlencode( char *str )
{
	char *buf=NULL,*ptr=NULL;
	char hex[] = "0123456789ABCDEF";
  
	buf = xmalloc( strlen(str) << 2 );
	ptr = buf;
  
	while(*str)
	{
		if( isalnum(*str) || *str == '-' || *str == '_' || *str == '.' || *str == '~' )
			*ptr++ = *str;
		else if( *str == ' ' )
			*ptr++ = '+';
         	else {
			*ptr++ = '%';
			*ptr++ = hex [(*str >> 4)&15];
       			*ptr++ = hex [(*str & 15)&15];
         	}
		str++;
	}

	*ptr = '\0';

	return buf;
}
  
char *double_urlencode( char *str )
{
	char *buf=NULL,*buf2=NULL,*ptr=NULL;

	char hex[] = "0123456789ABCDEF";
  
	buf = xmalloc( strlen(str) << 2 );
	ptr = buf;
  
	while(*str)
	{
		if( isalnum(*str) || *str == '-' || *str == '_' || *str == '~' )
			*ptr++ = *str;
		else if( *str == ' ' )
			*ptr++ = '+';
         	else {
			*ptr++ = '%'; // i think optimize change this to %25
			*ptr++ = hex [(*str >> 4)&15];
       			*ptr++ = hex [(*str & 15)&15];
         	}
		str++;
	}

	*ptr = '\0';
	buf2 = xmalloc( strlen(buf) << 2 );
	buf2 = urlencode(buf);

	if(buf!=NULL)
	{
		free(buf);
		buf=NULL;
	}

	return buf2;
}


char *spaces2comment(char *str)
{
 char *out=replace(str," ","/**/");
 
 return out;
}



char *unmagicquote(char *str)
{
 char *out=replace(str,"'","%bf%27");
 
 return out;
}


char *apostrophe2nullencode(char *str)
{
 char *out=replace(str,"'","%00%27");
 
 return out;
}


char *rand_comment(char *str)
{
	int i=0,mem_size=strlen(str)+1;
	char *str_new=xmalloc(sizeof(char)*mem_size);
		
	while(*str != '\0')
	{
		
		if(!test_letter( *str ) )
		{
			entropy_clock();

			if( (rand()%16) < 4)
			{
				mem_size+=4;
				str_new=xrealloc(str_new,sizeof(char)*mem_size);
				*(str_new+i)=*str;
				i++;
				*(str_new+i)='/';
				i++;
				*(str_new+i)='*';
				i++;
				*(str_new+i)='*';
				i++;
				*(str_new+i)='/';
			} else {
				*(str_new+i)=*str;
			}
			i++;
		} else {
			*(str_new+i)=*str;
			i++;
		}

	
		str++;	
	}


	if(str_new != NULL)
	{
		free(str_new);
	}

	return str_new;

}



char *rand_space(char *str)
{
	int i=0,mem_size=strlen(str)+1;
	char *str_new=xmalloc(sizeof(char)*mem_size);
		
	while(*str != '\0')
	{
		
		if(*str == ' ' )
		{
			entropy_clock();

			if( (rand()%4) <= 2)
			{
				mem_size+=4;
				str_new=xrealloc(str_new,sizeof(char)*mem_size);
				*(str_new+i)=*str;
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
			} else {	
				mem_size+=10;
				str_new=xrealloc(str_new,sizeof(char)*mem_size);
				*(str_new+i)=*str;
				i++;
				*(str_new+i)=' ';     // Loop unrolling...
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
				i++;
				*(str_new+i)=' ';
			}
			i++;
		} else {
			*(str_new+i)=*str;
			i++;
		}

	
		str++;	
	}


	if(str_new != NULL)
	{
		free(str_new);
	}

	return str_new;
}


char *replace_keywords(char *str)
{
 int mem_size=strlen(str)+1;
 char *out=malloc(sizeof(char)*mem_size);
 char *strs[] = {"select", "union", "delete", "script","where","from","and","eval","exec","or","update"};
 char *strs2[] = {"selselectect", "uniunionon", "deldeleteete", "scrscriptipt","whewherere","frfromom","anandd","evevalal","exexecec","oorr","updupdateate"};
 short num=10;

	 strcpy(out,str);

	do {
		char *tmp=replace(out,strs[num],strs2[num]);
		mem_size=strlen(tmp)+1;
		out=xrealloc(out,sizeof(char)*mem_size);
		strncpy(out,tmp,mem_size-1);
		if(tmp != NULL)
		{
			free(tmp);
			tmp=NULL;
		}
		num--;
	} while(num!=-1);

 return out;
}