WebApp Sec mailing list archives

Re: Application for stress testing webservers.


From: skill2die4 () secguru com
Date: Fri, 22 Jul 2005 08:09:09 -0500 (CDT)


Hey people, :)
Anyone happen to know of a good "free" ;) tool that will do login
simulation stress testing for web portals?


A list of stress testing tools from

    http://www.secguru.com/webapp/denial-of-service.html


* DieselTest
------------------
Dieseltest is a Windows application that simulates hundreds or thousands
of users hitting a website. From the perspective of the web server, there
is no difference between a request coming from a Dieseltest virtual user
and a live user on the web. User can create a test script using script
editor provided with the application. The script contains all of the
requests that a real-world user would make of a website.

* [LoadTest] FakeConnect
--------------------------
FakeConnect is a application/network "stress-test" program. It can
simulate a real TCP connection (with SYN, ACK, and ACK_SEQ), opening up to
65000 connections without overloading the local machine.

* OpenSTA - Open System Testing Architecture
---------------------------------------------
Basically scripted HTTP load or stress tests with performance measurement
run from a single machine or distributed and coordinated across many
machines. Scripts can initially be created by recording actions performed
through your normal browser. Editing and programming in "intelligence" to
scripts can provide variety over a large numbers of simulated users,
sanity checking of returned content and introduction of specialized
timers.

* http_load - multiprocessing http test client
--------------------------------------------------
http_load runs multiple http fetches in parallel, to test the throughput
of a web server. However unlike most such test clients, it runs in a
single process, so it doesn't bog down the client machine. It can be
configured to do https fetches as well.

* Web Performance Trainer - Load & Stress Testing Tool
-------------------------------------------------------
Web Performance Trainer is a load testing and stress testing tool for Web
servers. Its statistical analysis takes your site's performance criteria,
and determines the number of users your Web site can handle. Because data
is collected at the URL level, it not only identifies slow Web pages, but
identifies the particular part of the Web page that caused the problem.

* Grinder
------------
The Grinder is a Java load-testing framework. It is freely available under
a BSD-style open-source license.
The Grinder makes it easy to orchestrate the activities of a test script
in many processes across many machines, using a graphical console
application.


* SIEGE - A free HTTP/HTTPS stress tester
------------------------------------------
Siege is an http regression testing and benchmarking utility. It was
designed to let web developers measure the performance of their code under
duress, to see how it will stand up to load on the internet. It lets the
user hit a web server with a configurable number of concurrent simulated
users.



HTH,


-=skillz=-

www.wikisecure.com



.


Current thread: