diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 2c137c5f4..8ed1e296e 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -365,7 +365,7 @@ def checkSqlInjection(place, parameter, value): candidates = filter(None, (_.strip() if _.strip() in (kb.pageTemplate or "") and _.strip() not in falsePage else None for _ in (trueSet - falseSet))) if candidates: conf.string = random.sample(candidates, 1)[0] - infoMsg = "%s parameter '%s' seems to be '%s' injectable (with --string=%s)" % (place, parameter, title, repr(conf.string).lstrip('u')) + infoMsg = "%s parameter '%s' seems to be '%s' injectable (with --string=\"%s\")" % (place, parameter, title, repr(conf.string).lstrip('u').strip("'")) logger.info(infoMsg) injectable = True diff --git a/lib/core/option.py b/lib/core/option.py index cb452d4e5..e5b349a90 100644 --- a/lib/core/option.py +++ b/lib/core/option.py @@ -1375,6 +1375,9 @@ def __cleanupOptions(): if conf.oDir: paths.SQLMAP_OUTPUT_PATH = conf.oDir + if conf.string: + conf.string = conf.string.decode("unicode_escape") + threadData = getCurrentThreadData() threadData.reset()