http://penetration-testing.7safe.com/the-art-of-exploiting-lesser-known-injection-flaws-revealed-at-black-hat/

http://code.google.com/p/xpath-blind-explorer/downloads/detail?name=Xpath%20Blind%20Explorer%201.0.zip&can=2&q=