sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
 
It has full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query, stacked queries and out-of-band.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Sqlmap - Automatic SQL injection and database takeover tool

Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.

Nogotofail - Network Security Testing Tool

Zope.testbrowser provides an easy-to-use programmable web browser with special focus on testing. It is used in Zope, but it's not Zope specific, it can be used to test or otherwise interact with any web site.

Zope-Testbrowser Programmable browser for functional black-box tests

Splinter is an open source tool for testing web applications using Python. It lets you automate browser actions, such as visiting URLs and interacting with their items. Splinter is an abstraction layer on top of existing browser automation tools such as Selenium, PhantomJS and zope.testbrowser. It has a high-level API that makes it easy to write automated tests of web applications. It has drivers for Chrome and Firefox for browser-based testing, and zope.testbrowser and PhantomJS for headless testing.
 
Its features include: 
<ul>
<li>simple api</li>
<li>multi webdrivers (chrome webdriver, firefox webdriver, phantomjs webdriver, zopetestbrowser, remote webdriver)</li>
<li>css and xpath selectors</li>
<li>support to iframe and alert</li>
<li>execute javascript</li>
<li>works with ajax and async javascript</li>
</ul>

Splinter is an open source tool for testing web applications using Python. It lets you automate browser actions, such as visiting URLs and interacting with their items. Splinter is an abstraction layer on top of existing browser automation tools such as Selenium, PhantomJS and zope.testbrowser. It has a high-level API that makes it easy to write automated tests of web applications. It has drivers for Chrome and Firefox for browser-based testing, and zope.testbrowser and PhantomJS for headless testing.

Splinter - Python test framework for web applications

Mongoaudit not only detects mis-configurations, known vulnerabilities and bugs but also gives you advice on how to fix them, recommends best practices and teaches you how to DevOp like a pro!  There are quite a few holes in its default configuration settings. This fact, combined with abundant lazy system administrators and developers, led to what the press has called the MongoDB apocalypse.

Mongoaudit  - A powerful MongoDB auditing and pentesting tool

Pylot is a free open source tool for testing performance and scalability of web services. It runs HTTP load tests, which are useful for capacity planning, benchmarking, analysis, and system tuning. Pylot generates concurrent load (HTTP Requests), verifies server responses, and produces reports with metrics. Tests suites are executed and monitored from a GUI or shell/console. 

 It supports HTTP and HTTPS. It is multi-threaded and generates real time stats. Response is verified with regular expressions. GUI and Console mode support available.

Pylot is a free open source tool for testing performance and scalability of web services. It runs HTTP load tests, which are useful for capacity planning, benchmarking, analysis, and system tuning. Pylot generates concurrent load (HTTP Requests), verifies server responses, and produces reports with metrics. Tests suites are executed and monitored from a GUI or shell/console.

Pylot - Performance & Scalability Testing of Web Services

HTTPolice is a lint for HTTP requests and responses. It checks them for conformance to standards and best practices. As a command-line tool, it can read HAR files or raw HTTP/1.x TCP streams. HTTPolice just analyzes anything you feed into it. Thus, it can be used on requests and responses captured from a real process or test suite.

HTTPolice - Lint for HTTP requests and responses

Discover open source projects across all platforms

Projects

Sqlmap - Automatic SQL injection and database takeover tool

Nogotofail - Network Security Testing Tool

Zope-Testbrowser Programmable browser for functional black-box tests

Splinter - Python test framework for web applications

Mongoaudit - A powerful MongoDB auditing and pentesting tool

Pylot - Performance & Scalability Testing of Web Services

HTTPolice - Lint for HTTP requests and responses

Tagcloud

License

Suggested keywords:

Projects

Sqlmap - Automatic SQL injection and database takeover tool

Nogotofail - Network Security Testing Tool

Zope-Testbrowser Programmable browser for functional black-box tests

Splinter - Python test framework for web applications

Mongoaudit - A powerful MongoDB auditing and pentesting tool

Pylot - Performance & Scalability Testing of Web Services

HTTPolice - Lint for HTTP requests and responses

Tagcloud

License