How To Do Web Penetration Testing?

What are your favorite web testing tools?

  • Web developers - what tools do you use to test your sites? I've been tasked with putting together a list of web testing tools. Since that's a really useful question in general, I thought I would get the hive mind's input. What tools do you use for website testing? That can include everything from markup validators to link checkers to cross browser testing tools to anything else. Help me put together my list of popular web testing tools and tell me what you use for site checking. One note: For this purpose, I'm not interested in SEO tools. That's a different list for a different day.

  • Answer:

    I've used selenium for web application unit testing.

fremen at Ask.Metafilter.Com Visit the source

Was this solution helpful to you?

Other answers

I read "testing" more as "Making sure everything works right" and not "Debugging a problem." (For the latter, Firebug, of course.) For the former, I run a local instance of our website/application, and use http://cukes.info/ tests making heavy use of http://github.com/brynary/webrat. They advocate using it for http://en.wikipedia.org/wiki/Behavior_Driven_Development, but I typically use it for making sure I'm not introducing regressions. The tests aren't nearly complete, but they've caught a lot.

fogster

I'm not a developer, but work closely with developers a lot of the time. Some of the tools we use are https://addons.mozilla.org/en-US/firefox/addon/1843/ and http://www.fiddler2.com/fiddler2/ for front end debugging as well as third party tagging implementations. Fiddler is great because its cross-browser while firebug is Firefox only.

jourman2

Adobe's browserlab is fantastic.

milarepa

It's an ancient and crude tool (though still maintained) but for small sites especially I still like to do at least one run-through with http://en.wikipedia.org/wiki/Xenu's_Link_Sleuth. It simply tries to follow all the URIs on the site and so sometimes uncovers problems I didn't see in other tools.

XMLicious

For more complex functional testing, you can record or write scripts usinghttp://seleniumhq.org/. This is useful for sites that provide many forms and change frequently. We also http://twill.idyll.org/ for a similar purpose, which is an easily scriptable web browser for Python.

sophist

Thirding selenium. And we tie that into for load testing.

flipper

Sorry, borked the link: http://browsermob.com/.

flipper

When developing on your computer instead of uploading to a website (especially php) to view the site, use a personal server. Try http://www.wampserver.com/en/.

BurN_

Firebug and the Web Developer Toolbar pretty much go without saying. I like to look at sites in Lynx (or Links) every once in a while. The Live HTTP Headers add-on has helped me hugely with debugging, as has of course the Firefox error console. There's an IE6-specific tool a bit like Firebug which I've had to use from time to time called http://www.debugbar.com/.

AmbroseChapel

Related Q & A:

Just Added Q & A:

Find solution

For every problem there is a solution! Proved by Solucija.

  • Got an issue and looking for advice?

  • Ask Solucija to search every corner of the Web for help.

  • Get workable solutions and helpful tips in a moment.

Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.