1. soapUI
2. WCF Storm
3. SOA Cleaner
4.webscarab webservices模块
5.ws-digger
6.wsscanner
7.burp suite插件 http://resources.infosecinstitute.com/soap-attack-1/
8. PTES, penetration testing execution standard
9.WS-SQLI
10. msfwebfuzz
http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines
google dork
filetype:asmx
filetype:jws
filetype:wsdl
