Testing out this toolkit http://portswigger.net/burp/.
I am trying to figure out if it uses simulation to walk through the web services. Would be useful if there was a video to explain this.