This is another Firefox plugin, but unlike Tamper Data, XSS Me lets you do cross-site scripting attack tests.
Assignment: Install XSS Me and try out its basic functions.
SQL Inject Me
Like XSS Me, this tool comes from Security Compass. It’s a slick tool for finding fields and launching SQL injection attacks on them.