decoding of chars for --os-shell

stamparm · stamparm · commit 4d4e3802e4bb · 2011-05-03T15:31:12.000Z
diff --git a/lib/takeover/abstraction.py b/lib/takeover/abstraction.py
@@ -11,6 +11,7 @@
 from lib.core.common import Backend
 from lib.core.common import isTechniqueAvailable
 from lib.core.common import readInput
+from lib.core.convert import safechardecode
 from lib.core.data import conf
 from lib.core.data import kb
 from lib.core.data import logger
@@ -53,19 +54,23 @@ def execCmd(self, cmd, silent=False):
             raise sqlmapUnsupportedFeatureException, errMsg
 
     def evalCmd(self, cmd, first=None, last=None):
+        retVal = None
+
         if self.webBackdoorUrl and not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED):
-            return self.webBackdoorRunCmd(cmd)
+            retVal = self.webBackdoorRunCmd(cmd)
 
         elif Backend.getIdentifiedDbms() in ( DBMS.MYSQL, DBMS.PGSQL ):
-            return self.udfEvalCmd(cmd, first, last)
+            retVal = self.udfEvalCmd(cmd, first, last)
 
         elif Backend.isDbms(DBMS.MSSQL):
-            return self.xpCmdshellEvalCmd(cmd, first, last)
+            retVal = self.xpCmdshellEvalCmd(cmd, first, last)
 
         else:
             errMsg = "Feature not yet implemented for the back-end DBMS"
             raise sqlmapUnsupportedFeatureException, errMsg
 
+        return safechardecode(retVal)
+
     def runCmd(self, cmd):
         getOutput = None
 
