[sqlmap-users] Not url-encoding POST-data possible?

[Thomas S. <ts...@go...>]

Hi,

can I tell sqlmap to not url-encode POST-data?

In my case a php webservice complains about not getting a '<' as first
character:

   Warning: simplexml_load_string(): Entity: line 1: parser error : Start
tag expected, '<' not found in...
   Warning: simplexml_load_string(): %3Crequest...

The reason is, that sqlmap sends the payload url-encoded:

   %3CRequest%3E%3CID%3E111*%3C/ID>%3C%2FRequest%3E

Trying the same request in burp without urlencoding like this:

   <Request><ID>111*</ID></Request>

does not produce the error

Thanks!

Thomas