Fuzz GWT payloads with sqlmap ================================== sqlmap -r gwt_rpc_call.txt --tamper=space2comment,charencode,charunicodeencode,charunicodeescape --dbms=postgresql Note: The variables you want to fuzz must have a '*' character at the end of the input. e.g. `input|john*`