diff --git a/lib/request/inject.py b/lib/request/inject.py index 48305e703..f9ae05658 100644 --- a/lib/request/inject.py +++ b/lib/request/inject.py @@ -358,11 +358,13 @@ def __goError(expression, resumeValue=True): if match: output = match.group('result') + if kb.dbms == "Oracle" and output: + output = output.replace("__SPACE__", " ") return output -def getValue(expression, blind=True, inband=True, error=False, fromUser=False, expected=None, batch=False, unpack=True, sort=True, resumeValue=True, charsetType=None, firstChar=None, lastChar=None, dump=False, suppressOutput=False): +def getValue(expression, blind=True, inband=True, error=True, fromUser=False, expected=None, batch=False, unpack=True, sort=True, resumeValue=True, charsetType=None, firstChar=None, lastChar=None, dump=False, suppressOutput=False): """ Called each time sqlmap inject a SQL query on the SQL injection affected parameter. It can call a function to retrieve the output diff --git a/xml/queries.xml b/xml/queries.xml index 5abdeb8f2..e3b41ecb2 100644 --- a/xml/queries.xml +++ b/xml/queries.xml @@ -91,7 +91,8 @@ - + +