Web Server Stress Test Tool Open Source

Web Stress Test Tool
Web Server Stress Test Tool Open Source Online
Web Server Stress Test Tool Open Source Download
Server Stress Test Software
Web Server Performance Testing Tools
Web Application Stress Tool Download

Description

Web Application Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security vulnerabilities such as Cross-site scripting, SQL Injection, Command Injection, Path Traversal and insecure server configuration. This category of tools is frequently referred to as Dynamic Application Security Testing (DAST) Tools. A large number of both commercial and open source tools of this type are available and all of these tools have their own strengths and weaknesses. If you are interested in the effectiveness of DAST tools, check out the OWASP Benchmark project, which is scientifically measuring the effectiveness of all types of vulnerability detection tools, including DAST.

Here we provide a list of vulnerability scanning tools currently available in the market.

Apache JMeter is a 100% pure Java, Open Source application that.

Open, Systems Testing Architecture OpenSTA is a distributed software testing architecture designed around CORBA, it was originally developed to be commercial software by CYRANO. The current toolset has the capability of performing scripted HTTP and HTTPS heavy load tests with performance measurements from Win32 platforms.
Not open source, but Microsoft has a free (not GNU free) web stress tool if you are going to stress test an web application. When it comes to open source tools, there is quite a few depending on your needs. The project I work in have used TestMaker. It is quite good, but the UI is a bit confusing.

Disclaimer: The tools listing in the table below are presented in alphabetical order. OWASP does not endorse any of the Vendors or Scanning Tools by listing them in the table below.

OWASP is aware of the Web Application Vulnerability Scanner Evaluation Project (WAVSEP). WAVSEP is completely unrelated to OWASP and we do not endorse its results, nor any of the DAST tools it evaluates. However, the results provided by WAVSEP may be helpful to someone interested in researching or selecting free and/or commercial DAST tools for their projects. This project has far more detail on DAST tools and their features than this OWASP DAST page.

Tools Listing

Name/Link	Owner	License	Platforms	Note
Abbey Scan	MisterScanner	Commercial	SaaS
Acunetix	Acunetix	Commercial	Windows, Linux, MacOS	Free (Limited Capability)
App Scanner	Trustwave	Commercial	Windows
AppCheck Ltd.	AppCheck Ltd.	Commercial	SaaS	Free trial scan available
AppScan	HCL Software	Commercial	Windows
AppScan on Cloud	HCL Software	Commercial	SaaS
AppSpider	Rapid7	Commercial	Windows
AppTrana Website Security Scan	AppTrana	Free	SaaS
Arachni	Arachni	Free	Most platforms supported	Free for most use cases
BREACHLOCK Dynamic Application Security Testing	BREACHLOCK	Commercial	SaaS
BlueClosure BC Detect	BlueClosure	Commercial	Most platforms supported	2 week trial
Burp Suite	PortSwiger	Commercial	Most platforms supported	Free (Limited Capability)
Contrast	Contrast Security	Commercial	SaaS or On-Premises	Free (Full featured for 1 App)
Crashtest Security	Crashtest Security	Commercial	SaaS or On-Premises
Cyber Chief	Audacix	Commercial	SaaS or On-Premises
Detectify	Detectify	Commercial	SaaS
Digifort- Inspect	Digifort	Commercial	SaaS
Edgescan	Edgescan	Commercial	SaaS
GamaScan	GamaSec	Commercial	Windows
GoLismero	GoLismero Team	Open Source	Windows, Linux and Macintosh	GPLv2.0
Grabber	Romain Gaucher	Open Source	Python 2.4, BeautifulSoup and PyXML
Gravityscan	Defiant, Inc.	Commercial	SaaS	Free (Limited Capability)
Grendel-Scan	David Byrne	Open Source	Windows, Linux and Macintosh
HostedScan.com	HostedScan.com	Commercial	SaaS	Free Forever
IKare	ITrust	Commercial	N/A
ImmuniWeb	High-Tech Bridge	Commercial	SaaS	Free (Limited Capability)
Indusface Web Application Scanning	Indusface	Commercial	SaaS	Free trial available
InsightVM	Rapid7	Commercial	SaaS	Free trial available
Intruder	Intruder Ltd.	Commercial
K2 Security Platform	K2 Cyber Security	Commercial	SaaS/On-Premise	Free trial available
N-Stealth	N-Stalker	Commercial	Windows
Nessus	Tenable	Commercial	Windows
Netsparker	Netsparker	Commercial	Windows
Nexpose	Rapid7	Commercial	Windows/Linux	Free (Limited Capability)
Nikto	CIRT	Open Source	Unix/Linux
Probely	Probely	Commercial	SaaS	Free (Limited Capability)
Proxy.app	Websecurify	Commercial	Macintosh
QualysGuard	Qualys	Commercial	N/A
ReconwithMe	Nassec	Commercial	SaaS	Free (Limited Capability)
Retina	BeyondTrust	Commercial	Windows
Ride (REST JSON Payload fuzzer)	Adobe, Inc.	Open Source	Linux / Mac / Windows	Apache 2
SOATest	Parasoft	Commercial	Windows / Linux / Solaris
Sec-helpers	VWT Digital	Open Source or Free	N/A
SecPoint Penetrator	SecPoint	Commercial	N/A
Security For Everyone	Security For Everyone	Commercial	SaaS	Free (Limited Capability)
Securus	Orvant, Inc	Commercial	N/A
Sentinel	WhiteHat Security	Commercial	N/A
StackHawk	StackHawk	Commercial	SaaS
Tinfoil Security	Tinfoil Security, Inc.	Commercial	SaaS or On-Premises	Free (Limited Capability)
Trustkeeper Scanner	Trustwave SpiderLabs	Commercial	SaaS
Vega	Subgraph	Open Source	Windows, Linux and Macintosh
Vex	UBsecure	Commercial	Windows
WPScan	WPScan Team	Commercial	Linux and Mac	Free options
Wapiti	Informática Gesfor	Open Source	Windows, Unix/Linux and Macintosh
Web Security Scanner	DefenseCode	Commercial	On-Premises
WebApp360	TripWire	Commercial	Windows
WebCookies	WebCookies	Free	SaaS
WebInspect	Micro Focus	Commercial	Windows
WebReaver	Websecurify	Commercial	Macintosh
WebScanService	German Web Security	Commercial	N/A
Websecurify Suite	Websecurify	Commercial	Windows, Linux, Macintosh	Free (Limited Capability)
Wikto	Sensepost	Open Source	Windows
Zed Attack Proxy	OWASP	Open Source	Windows, Unix/Linux, and Macintosh	Apache-2.0
beSECURE (formerly AVDS)	Beyond Security	Commercial	SaaS	Free (Limited Capability)
w3af	w3af.org	Open Source	Linux and Mac	GPLv2.0

References

SAST Tools - OWASP page with similar information on Static Application Security Testing (SAST) Tools
Free for Open Source Application Security Tools - OWASP page that lists the Commercial Dynamic Application Security Testing (DAST) tools we know of that are free for Open Source
http://sectooladdict.blogspot.com/ - Web Application Vulnerability Scanner Evaluation Project (WAVSEP)
http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria - v1.0 (2009)
http://www.slideshare.net/lbsuto/accuracy-and-timecostsofwebappscanners - White Paper: Analyzing the Accuracy and Time Costs of WebApplication Security Scanners - By Larry Suto (2010)
http://samate.nist.gov/index.php/Web_Application_Vulnerability_Scanners.html - NIST home page which links to: NIST Special Publication 500-269: Software Assurance Tools: Web Application Security Scanner Functional Specification Version 1.0 (21 August, 2007)
http://www.softwareqatest.com/qatweb1.html#SECURITY - A list of Web Site Security Test Tools. (Has both DAST and SAST tools)

If you’re having problems with your computer and it isn’t behaving correctly in certain situations, then it could be a cause for concern. One of these situations could be when you are performing resource intensive tasks and the system becomes unstable or crashes while being put under stress. This could be a problem such as the CPU overheating and shutting itself down, or even the graphics card running into similar trouble. Or maybe the power supply simply cannot cope anymore with all hardware components running at full intensity…

Whether you’re someone who wants to test their PC components because they suspect a possible fault, or have bought / built your own PC and want to make sure it runs stably and reliably at maximum load, you need a program to be able to put the system under the desired levels of stress for periods of time to monitor the situation. Here are 10 tools (9 of them free) to do just that and put your system under huge amounts of stress to check for faults or problems.

1. HeavyLoad

HeavyLoad is a utility that aims to stress the main component areas of a PC, namely processor, memory, hard drive and graphics. It can also run these tests individually or altogether which is obviously the time maximum stress will be placed of the system hardware and also the power supply. The Disk space and Free memory tests are not really there to put undue stress on those components, but rather continually writes a large file to the drive and allocates / deallocates memory to the system simulating heavy load when all major components are utilized.

There is an option though to add more stress to the hard drive by using Jam software’s other popular included tool Treesize Free to simulate more heavy disc access. HeavyLoad is available as portable and installer versions and is a very useful overall system stability tester to keep in the USB toolkit. Works on Windows XP to Windows 8 32-bit and 64-bit.

Download HeavyLoad

2. FurMark

Furmark is a stability and stress testing tool designed especially for graphics cards and runs a very intensive “Fur” rendering algorithm which is very good at pushing the GPU to its absolute limits. There are a few settings that can be changed such as resolution, full screen mode and anti aliasing, and a few presets are available such as running in the HD resolutions of 720 / 1080, or running a burn-in test for 15 minutes. The benchmark’s default run time and an alarm for the maximum allowable temperature for the graphics card is found via the Settings window.

Benchmark scores can be compared or viewed online. FurMark is compatible with Windows XP and above.

Download FurMark

3. StressMyPC

This is a simple, tiny and portable utility of around 20KB that can run a stability test on your single, multi core or multi threaded processor. In addition it can also perform a couple of other tests such as a simple GPU graphics test and also one for the hard drive. The “Paint-Stress” GPU test is enabled by default and the “HD-test” and a more aggressive CPU test which will push your processor towards 100% (the standard test used about 60% of a dual core CPU during testing) can be enabled by the buttons at the top of the window. StressMyPC works on all versions of Windows 2000 and above, including 64-bit.

Download StressMyPC

4. System Stability Tester

System Stability Tester works by simply using the well known and famous method of telling the computer to calculate the value of Pi up to 128 million digits. This will completely consume your processor for as long as the test runs and can also be used as a basic benchmarking tool to see how long it takes your CPU to calculate the specified number of digits. The range can be between 128 thousand up to 128 million and can be run continuously up to 50 times using up to 32 threads. There are 2 methods to choose from, Borwein and Gauss-Legendre which is also used by the classic SuperPi tool.

Works on Windows XP and above, portable and installer versions are available.

Download System Stability Tester

5. IntelBurnTest

Despite the name, IntelBurnTest actually works fine for testing on AMD processors as well, and is called as such because it makes use of the Intel Linpack libraries which Intel themselves use to stress test CPU’s. Usage is easy and all you have to do is set the number of times to run the test, the number of threads to use and the test stress level. This can be Standard, High, Very High or Maximum and if your available RAM is less than what the test requires, choose Custom and set the amount of memory to use accordingly.

The program is portable and runs on Windows XP and above.

Download IntelBurnTest

Next ›

Web Stress Test Tool

View All

You might also like:

11 Tools to Find out Information About Your Computer’s Hardware5 Free Tools to Check and Test USB Flash Drives6 Free Programs to Check Your Video Card Memory For Errors8 Free Tools to Test Read and Write Speed of USB Flash Drives2 Ways to Test and Determine If Your BitTorrent Speed is Limited or Throttled

Todd3 years ago

A nice collection of stress tests, but I am currently searching for DOS-based software. Will keep looking, but perhaps you could add something in this vein the next time you update the article?

BurninTest software is good for testing, but unfortunately it’s not free

jayaram4 years ago

any commandline tools, i need them in my automation

3d mark is good for higher end graphics cards

Miler5 years ago

Aida64 is also good program. It is almost head-to-head with BurnIn Test made by PassMark

I generally run Orthos and MemTest. For the hard disk, when I get a new one, I copy tons of files big and small to it and then try using these files. Last drive showed problems immediately after this.

I also always do a Nero Recode and x264 encodes since these are heavy CPU programs.

Web Server Stress Test Tool Open Source Online

Merlin Magii13 years ago

Useful tool and have noted contributors very helpful warnings.

Looks like a decent benchmarking software. Thanks Ray!

John13 years ago

My suggestion regarding this type of program:
Run it well BEFORE your warranty expires. Make sure you didn’t get a system with faulty components. Don’t experiment on an older system (with gigs of files & programs at risk). If something is “marginal”, these programs WILL find them – often destructively!

Second this – it is actually possible for stress testing software to fry your PC. E.g. normal use of a video card will not come close to the temperature and power consumption of running a 100% stress test like FurMark, and this could cause an otherwise working component to fail. It does mean the component is running out of spec, so it could even be recommended to run this just before your warranty expires, but not after.

Brian1 year ago

An example of how testing software can be destructive if it does not change or write anything new or over existing files, code or registry? If a tool writes its own fix without showing you changes before they happen then don’t use it.

Thanks again for a useful tool Raymond

Ammar13 years ago

Thank you Raymond.

Nice tool.

A very good and large hardware store here uses Everest for stability testing

Web Server Stress Test Tool Open Source Download

DT13 years ago

Server Stress Test Software

Thanks for the info Raymond!