diff --git a/karton_sqlmap/karton_sqlmap.py b/karton_sqlmap/karton_sqlmap.py index 59fa7a5..d1f1e9b 100644 --- a/karton_sqlmap/karton_sqlmap.py +++ b/karton_sqlmap/karton_sqlmap.py @@ -168,7 +168,7 @@ def _expand_query_parameters_for_scanning(url: str) -> List[Tuple[str, str]]: original_value = new_query[key] new_query[key] = token - # We replace token with * after building the URL, so that the asterisk is passwd to sqlmap unescaped + # We replace token with * after building the URL, so that the asterisk is passed to sqlmap unescaped new_query_encoded = urllib.parse.urlencode(new_query) new_url_parsed = url_parsed._replace(query=new_query_encoded) new_url = urllib.parse.urlunparse(new_url_parsed)