1. soapUI

2. WCF Storm

3. SOA Cleaner

4.webscarab webservices模块

5.ws-digger

6.wsscanner

7.burp suite插件 http://resources.infosecinstitute.com/soap-attack-1/

8. PTES, penetration testing execution standard

9.WS-SQLI

10. msfwebfuzz

http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines

google dork

filetype:asmx

filetype:jws

filetype:wsdl