This are some of my frequence use Firefox Search Engines Add-ons.
Live.com - The Reason why I use this? MSN seach engine have some features that google don’t. For example you can search by IP (if you would like to know what website is living on this IP). Usually poeple use this to check what are the virtual hosts on the particular server. type this for example. ip:<x.x.x.x>
Wikipedia - Ya, I like WIKI. With Wikipedia you can easily find alots of useful info for almost everything under the sun ( sooner or later due to public contribution)

Youtube - ‘Youtubing’ become hobby of many peoples now day. If you often search movie clips over Youtube, you probably can try this.

Whois Lookup - How do you check on domain whois usual? through some whois website? Probably you can do it more faster through this Firefox search engine add-on.

to be continue..

WSFuzzer

This tool was created based on, and to automate, some of the manual SOAP pen testing work we perform.

Features of WSFuzzer:

• Attacks a web service based on either valid WSDL, a valid endpoint & namespace, or it can try to intelligently detect WSDL for a given target.
• It gives you the ability to handle methods with multiple parameters. Each parameter is handled as a unique entity and can either be attacked or left alone. As of version 1.8.1 this was taken one step further, there are now 2 modes of attacking parameters. The traditional mode is unchanged and is now called “individual” mode due to the fact that each param is fuzzed individually. The new mode is “simultaneous” and attacks multiple parameters simultaneously with a given data set.
• The fuzz generation (attack strings) consists of a combination of a dictionary file, some optional dynamic large injection patterns, and some optional method specific attacks including automated XXE and WSSE attack generation.
• The tool provides the option of using some IDS Evasion techniques which makes for a powerful security infrastructure (IDS/IPS) testing experience.

Ddemonstration available at : http://www.neurofuzz.com/modules/software/vidz.php
WSDigger
WSDigger is a web services testing framework. WSDigger contains sample attack plug-ins for SQL injection, cross site scripting and XPATH injection attacks. A web service vulnerable to XPATH injection is provided as an example with the tool. By releasing the framework as an open-source tool, users are encouraged to develop and share their own plug-ins.

XSS Tunnel is a proxy which allows you to traffic any HTTP traffic through a Cross-site Scripting (XSS) Channel opened by XSS Shell. The Demo below shows how to setup an XSS Channel between a victim and an attacker so that an attacker to control a victim’s browser by sending it commands.

This demo show the attacker post an comment with put in the malicious URL on the victim’s blog. All you need to do is to trick the victim to go your malicious website where you have your XSS channel setup. Once the victim click on the malicoius URL, then that’s is how the story began:

Demo of XSS Tunneling with hijack WordPress’s admin authenticated session.

• XSS Tunelling White Paper
• XSS Shell, XSS Tunnel Downlaod
• Better Resolution Demonstration Video