Closed
Description
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Simply scan an ASP(.NET) website that has the +
character encoded as part of __VIEWSTATE
or any other of the __-PREFIXED
ASP(.NET) parameters
Expected behavior
URL encode __ ASP(.NET) parameters
Desktop (please complete the following information):
- OS: Linux
- Ghauri version: v1.3 (latest)
Additional context
Please see this commit from SQLmap that fixed this exact issue.