Hi, can I tell sqlmap to not url-encode POST-data?
In my case a php webservice complains about not getting a '<' as first character: Warning: simplexml_load_string(): Entity: line 1: parser error : Start tag expected, '<' not found in... Warning: simplexml_load_string(): %3Crequest... The reason is, that sqlmap sends the payload url-encoded: %3CRequest%3E%3CID%3E111*%3C/ID>%3C%2FRequest%3E Trying the same request in burp without urlencoding like this: <Request><ID>111*</ID></Request> does not produce the error Thanks! Thomas ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ sqlmap-users mailing list sqlmap-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sqlmap-users