Improving the auto WAF bypass feature

lib/core/settings.py

@@ -20,7 +20,7 @@ from lib.core.enums import OS
 from thirdparty import six
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.10.8.41"
+VERSION = "1.10.8.42"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
@@ -74,6 +74,9 @@ RATE_LIMIT_MAX_DELAY = 60.0
 # is not pre-filtered here: semantics-preservation is verified at runtime by re-running detection
 # through each candidate, so a DBMS-incompatible script simply fails the trial and is discarded.
 WAF_BYPASS_TAMPERS = (
+    "castprefix",
+    "mid2leftright",
+    "odbcbrace",
     "equaltolike",
     "between",
     "greatest",