[sqlmap-users] Strange query before injection and after verification

[Andres F. <an...@an...>]

Hi Folks,

Whenever   I   use   sqlmap   injecting   into   cookies,   with  just
--technique=BT, even when I set --prefix="" and --suffix="" and really
no matter what I do I get the following

1- Connectivity test - All fine
2 - Check to see if the URL is stable - All fine here
3 - [PAYLOAD] 1pre ('""')'"))suff
4 - normal injection stuff...

Where  "pre"  is whatever I set as prefix (including blank) and "suff"
if my suffix string.

Is  there any way to stop the "('""')'"))" string from going out??
I've tried  everything  I  could  think  of,  even removed all payloads and
delimiters from payloads.xml.

Any clue?

ps:  The  really  weird  part is those characters (the parenthesis and
quotes)  would  change  depending  on the contents of the payloads.xml
file, yet would never go away.

-- 
Best regards,
 Andres                          mailto:an...@an...