I have been doing some research about Web Services security. I noticed that some sites are using Ajax and JQuery to consume ASMX WebServices. I navigated to the Web Service EndPoint and I realized that, from my machine, I was able to use the Test form to consume the service,a part from that I was able to see the HTTP mechanism to send SOAP over HTTP. Making this information available to remote users could drive to unwanted invocations and it could also drive to DoS attacks.
Do you believe that showing this Test form to remote users could drive to a service attack?