Ahead with UNION exploitation after UNION test moved to detection phase - a lot to do yet.

lib/techniques/inband/union/use.py

@@ -211,12 +211,10 @@ def unionUse(expression, direct=False, unescape=True, resetCounter=False, nullCh
 
     else:
         # Forge the inband SQL injection request
-        query = agent.forgeInbandQuery(expression, nullChar=nullChar)
+        query = unescaper.unescape(expression)
+        query = agent.cleanupPayload(kb.injection.data[PAYLOAD.TECHNIQUE.UNION].vector, query=query)
         payload = agent.payload(newValue=query)
 
-        debugMsg = "query: %s" % query
-        logger.debug(debugMsg)
-
         # Perform the request
         resultPage, _ = Request.queryPage(payload, content=True)
         reqCount += 1