Minor update regarding tamper script "uninitializedvariable.py"

src/core/tamper/uninitializedvariable.py

@@ -26,26 +26,25 @@
 
 __tamper__ = "uninitializedvariable"
 
+global obf_char
+
 if not settings.TAMPER_SCRIPTS[__tamper__]:
+  num = 2
+  obf_char = "${" + ''.join(random.choice(string.ascii_uppercase) for x in range(num)) + "}"
   settings.TAMPER_SCRIPTS[__tamper__] = True
 
 def tamper(payload):
   def add_uninitialized_variable(payload):
     settings.TAMPER_SCRIPTS[__tamper__] = True
-    num = 2
-    obf_char = "${" + ''.join(random.choice(string.ascii_letters) for x in range(num)) + "}"
-    payload = re.sub(r'([b-zD-Z])', lambda x: obf_char + x[0], payload)
+    payload = re.sub(r'([e-zD-Z])', lambda x: obf_char + x[0], payload)
     for word in settings.IGNORE_TAMPER_TRANSFORMATION:
       _ = obf_char.join(word[i:i+1] for i in range(-1, len(word), 1))
       if _ in payload:
         payload = payload.replace(_,_.replace(obf_char, ""))
     return payload
 
   if settings.TARGET_OS != settings.OS.WINDOWS:
-    if settings.EVAL_BASED_STATE != False:
-      return payload
-    else:
-      return add_uninitialized_variable(payload)
+    return add_uninitialized_variable(payload)
   else:
     return payload
 

src/utils/settings.py

@@ -262,7 +262,7 @@ def sys_argv_errors():
 DESCRIPTION = "The command injection exploiter"
 AUTHOR  = "Anastasios Stasinopoulos"
 VERSION_NUM = "4.1"
-REVISION = "10"
+REVISION = "11"
 STABLE_RELEASE = False
 VERSION = "v"
 if STABLE_RELEASE:
@@ -1156,6 +1156,7 @@ class AUTH_TYPE(object):
                   "then",
                   "else",
                   "fi",
+                  "%0d",
                   RANDOM_VAR_GENERATOR,
                   RANDOM_VAR_GENERATOR + "1",
                   RANDOM_VAR_GENERATOR + "2"