views:

106

answers:

4

I would like to stress (not sure this is the right word, but keep reading) the [POST] actions of my controllers. Does a tool exist that would generate many scenarios, like omitting fields, adding some, generating valid and invalid values, injecting attacks, and so on ? Thx

Update: I don't want to benchmark/performance test my site. Just automatically filling/tampering forms and see what happens

+1  A: 

WebInspect from Spidynamics (HP bought them).

I've used this one in my previous job (I recommended it to my employer at the time) and I was overwhelmed with the amount of info and testing I could do with it.

https://download.spidynamics.com/webinspect/default.htm

Antonio Louro
A: 

Apache JMeter might fit the bill?

toolkit
+1  A: 

Apache JMeter, is more likely to benchmark/stress itself rather than your site. I was recently pointed twards Faban which can be used for very simple and more complex tests and scenarios, its very performant. Also, take a look at OpenSTA and WebLoad both free and powerful with capabilities to record and replay complex scenarios.

ng
A: 

Have you seen CrossBow Web Stress Tester over at CodePlex?

  • supports get and post operations
  • you specify the number of threads, requests, waits, and timeouts
  • reads a txt file with name/value pairs for posting values

You'd have to download & modify the source if you wanted to generate random data for your Post variables.

p.campbell