XSS Me
This is another Firefox plugin, but unlike Tamper Data, XSS Me lets you do cross-site scripting attack tests.
![Security Testing with XSS Me](http://schoolforhackers.com/wp-content/uploads/xss_me-207x300.png)
Assignment: Install XSS Me and try out its basic functions.
SQL Inject Me
Like XSS Me, this tool comes from Security Compass. It’s a slick tool for finding fields and launching SQL injection attacks on them.
![Security Testing with SQL Inject Me](http://schoolforhackers.com/wp-content/uploads/sql_inject_me-261x300.png)