List of Web Application Stress Testers!ht

January 8, 2010 16:31 pm · 0 comments

by Black

in Open Source,Penetration Testing,Web Application Penetration Testing

If you are a regular reader of PenTestIT.Com, you might be aware that for the last 20 posts or so, we are mainly targeting HTTP/HTTPS stress testers, load testers, regression testers, etc. Trust us, we sure can write many more posts about this line of applications. But then, we thought that instead of writing about each one of them, we might just write a single post that will give you the information on all of them! This is it. Again, this does not follow any performance mechanism. As always, all of these software’s are open source and free! We have listed them according to our convenience.

Pylot: Pylot is a free open source tool for testing performance and scalability of web services. It runs HTTP load tests, which are useful for capacity planning, benchmarking, analysis, and system tuning.
Pylot generates concurrent load (HTTP Requests), verifies server responses, and produces reports with metrics. Tests suites are executed and monitored from a GUI or shell/console.

Download pylot version 1.26 here.

Httperf: Httperf is a tool for measuring web server performance. It provides a flexible facility for generating various HTTP workloads and for measuring server performance. The focus of httperf is not on implementing one particular benchmark but on providing a robust, high-performance tool that facilitates the construction of both micro- and macro-level benchmarks. The three distinguishing characteristics of httperf are its robustness, which includes the ability to generate and sustain server overload, support for the HTTP/1.1 and SSL protocols, and its extensibility to new workload generators and performance measurements.
Download httperf version 0.9.0 here.

FunkLoad: FunkLoad is a functional and load web tester, written in Python, whose main use cases are:
* Functional testing of web projects, and thus regression testing as well.
* Performance testing: by loading the web application and monitoring your servers it helps you to pinpoint bottlenecks, giving a detailed report of performance measurement.
* Load testing tool to expose bugs that do not surface in cursory testing, like volume testing or longevity testing.
* Stress testing tool to overwhelm the web application resources and test the application recover-ability.
* Writing web agents by scripting any web repetitive task, like checking if a site is alive.

Download FunkLoad version 1.10.0 here.

Tsung: Tsung is an open-source multi-protocol distributed load testing tool. It can be used to stress HTTP, WebDAV, SOAP, PostgreSQL, MySQL, LDAP and Jabber/XMPP servers. Tsung (formerly known as IDX-Tsunami) is a free software released under the GPLv2 license. The purpose of Tsung is to simulate users in order to test the scalability and performance of IP based client/server applications. You can use it to do load and stress testing of your servers. Many protocols have been implemented and tested, and it can be easily extended. WebDAV, LDAP and MySQL support have been added recently (experimental). It can be distributed on several client machines and is able to simulate hundreds of thousands of virtual users concurrently. Tsung is developed in Erlang, an open-source language made by Ericsson for building robust fault-tolerant distributed applications.
Download Tsung version 1.3.1 here.

Siege: Siege is an HTTP load testing and benchmarking utility. It was designed to let web developers measure their code under duress, to see how it will stand up to load on the internet. Siege supports basic authentication, cookies, HTTP and HTTPS protocols. It lets its user hit a web server with a configurable number of simulated web browsers. Those browsers place the server “under siege.”
Download Siege version 2.69 here.

Dieseltest: Dieseltest is an easy-to-use load testing tool for simulating hundreds or thousands of users on a website. It has a facility for recording scripts, playing them back, and showing the results in real time. Results can be exported for further analysis.
Download Dieseltest version 1.0.21 here.

WebLOAD: The WebLOAD Open Source Load Generation Engine is an open source project sponsored by RadView Software. This project is based on fourteen years of code development invested in WebLOAD Professional, the award winning performance testing solution. This project is intended for ISVs, SIs and software developers who need to integrate a professional load generation engine into their applications.
This software comes from RadWare!
Download WebLOAD version 8.1.0.141 here.

p-unit: An open source framework for unit test and performance benchmark, which was initiated by Andrew Zhang, under Apache License v2.0. p-unit supports to run the same tests with single thread or multi-threads, tracks memory and time consumption, and generates the result in the form of plain text, image or PDF file.
It also has a module for Android!
Download p-unit version 0.15 here.

HTTP Test Tool: HTTP Test Tool is a script based tool for testing and benchmarking web applications, web servers, proxy servers and web browsers.
httest can emulate clients and servers even in the same test script. Emulating servers is a unique feature, very useful for testing proxy servers, web browsers and HTTP clients.

Download HTTP Test Tool version 1.13.3 here.

http_load: http_load runs multiple http fetches in parallel, to test the throughput of a web server. However unlike most such test clients, it runs in a single process, so it doesn’t bog down the client machine. It can be configured to do https fetches as well.
Download http_load version 12mar2006 here.

The Grinder: The Grinder is a Java load testing framework that makes it easy to run a distributed test using many load injector machines. Test scripts are written in Jython, and HTTP scripts can be recorded easily from a browser session.
Download the Grinder version 3.3 here.

WebInject: WebInject is a tool for automated testing of web applications and web services. It can be used to test system components with HTTP interfaces, as a test harness to create a suite of functional and regression tests, or for service-level monitoring.
Download WebInject version 1.41 here.

OpenWebLoad: OpenWebLoad is a tool for load testing web applications. It aims to be easy to use and providing near real-time performance measurements of the application under test. This is particulary useful when you are doing optimization as you can see the impact of your changes almost immediately.
Download OpenWebLoad version 0.1.2 here.

We sure do know that there are a lot more, but we did not mention them here as they were too old to be mentioned. Nonetheless, if there are any ‘fresh’ one’s out there and you happen to know them, please let us know!

Searches leading to this post:
how to longitivity test web applications, lists of web applications, macros for simulating user load web application, webload version 8 1 0 141 recording issue

If you enjoyed this article, you might also like:

Previous post:

Next post: