Xpath Injection
Herramientas
Xpath Injection
http://bxpi.codeplex.com/
http://www.elladodelmal.com/2009/07/blind-xpath-injector-bxpi.html