Creating a UDP payload and a listener to implement a UDP remote connection as an alternate channel of communication.
Writing a program which allows an attacker to start a listener and listen for a connection back from a victim host.
Writing a program which creates a listener on the target host and allows an attacker to connect to it remotely.
Creating a mutational fuzzer to programatically parse SOAP definitions and fuzz SOAP endpoints for possible sqli errors.