Search Results for "web testing"
Sort By:
Showing 903 open source projects for "web testing"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
Offensive Web Testing Framework
Offensive Web Testing Framework (OWTF), is a framework
OWASP OWTF is a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST so that pentesters will have more time to see the big picture and think out of the box. More efficiently find, verify and combine vulnerabilities. Have time to investigate complex vulnerabilities like business logic/architectural flaws or virtual hosting sessions. Perform more tactical/targeted... -
2
Cerberus Testing
The Open Source Test Automation Platform
Cerberus Testing is a scalable test automation platform for teams searching to accelerate software delivery with confidence. Cerberus Testing is a test automation platform that allows iteration with quality and speed through test definition, execution, and reporting. The platform allows the creation of automated test cases through an easy-to-use web interface without any need for development skills - automated test implementation and management now become available for all elements of the development, quality, and business teams. ... -
3
ZAP
The OWASP ZAP core project
The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by a dedicated international team of volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing. ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ... -
4
PentestGPT
Automated Penetration Testing Agentic Framework Powered by LLMs
PentestGPT is an AI-powered autonomous penetration testing agent designed to perform intelligent, end-to-end security assessments using large language models. Published at USENIX Security 2024, it combines advanced reasoning with an agentic workflow to automate tasks traditionally handled by human pentesters. The platform supports multiple penetration testing categories, including web security, cryptography, reversing, forensics, privilege escalation, and binary exploitation. ... -
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
5
Playwright
Node library to automate Chromium, Firefox & WebKit with a single API
Playwright is a Node library for automating Chromium, Firefox and WebKit using a single API. It supports headless execution for all these browsers on Linux, macOS and Windows, providing automated web browser interactions that are fast, capable, reliable and ever-green. Playwright enables a broad spectrum of cross-browser web automation capabilities, which are used by Single Page Apps and Progressive Web Apps. These include scenarios that span multiple pages, domains and iframes; emulation... -
6
mslearn-tailspin-spacegame-web
Code used in Microsoft Learn modules to support Azure DevOps
The Tailspin Space Game Web project is a sample application created by Microsoft as part of its learning resources. It’s a web-based game application used in Microsoft Learn modules and documentation to demonstrate concepts such as Azure App Services, continuous integration and delivery (CI/CD) pipelines, and DevOps practices with GitHub Actions and Azure Pipelines. -
7
Web Experience Toolkit
Open source code library for building innovative websites
Web Experience Toolkit (WET): Open source code library for building innovative websites that are accessible, usable, interoperable, mobile-friendly and multilingual. This collaborative open source project is led by the Government of Canada. A collection of flexible and themeable templates and reusable components. A collaborative open source project led by the Government of Canada. HTML5-first approach (leveraging native HTML5 support and filling support gaps with “polyfills”) Supporting a... -
8
Proton Web Clients
Monorepo hosting the proton web clients
...These web clients run entirely in the browser, letting users securely interact with their email, calendars, files, and other services without needing native software installed, and benefiting from end-to-end encryption where applicable. The monorepo includes application logic, UI components, build scripts, and testing infrastructure for reliable deployments and streamlined continuous integration. -
9
go-web-framework-benchmark
Go web framework benchmark
go-web-framework-benchmark is a benchmark suite for comparing the performance of Go web frameworks. It was created to measure full HTTP request processing instead of only route matching speed. The project runs small real HTTP servers for many stable frameworks and tests a simple /hello endpoint. It can add configurable handler delay to simulate business work such as database calls, cache access, disk writes, socket activity, or microservice calls. The benchmark uses wrk and scripts to... -
Veeam Data Platform v13.1Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
Symfony BrowserKit
Simulates the behavior of a web browser
Symfony BrowserKit is a PHP library that simulates a web browser for testing purposes. It allows developers to make HTTP requests, interact with web forms, and test responses without requiring a real browser. BrowserKit is useful for functional testing and works seamlessly with Symfony’s HTTP client and other testing components, providing a robust environment for web application testing. -
11
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source... -
12
Locust
Scalable open source load testing tool
Locust is an open source user load testing tool written in Python. The idea behind Locust is to swarm your web site or other systems with attacks from simulated users during a test, with each user behavior defined by you using Python code. This swarming process is then monitored from a web UI in real-time, and will help identify any bottlenecks in your code before real users can come in. -
13
Shannon
Fully autonomous AI hacker to find actual exploits in your web apps
Shannon is an autonomous AI penetration testing system built to find and prove real, exploitable vulnerabilities in web applications rather than stopping at static warnings or best-guess alerts. It focuses on “proof by exploitation,” meaning it actively hunts for attack vectors in your code and then attempts to execute end-to-end exploits to demonstrate impact. The project blends source-aware analysis with automated web interaction so it can validate issues like injection flaws, authentication bypasses, and other exploitable paths in a way that resembles an actual attacker’s workflow. ... -
14
UFONet
UFONet - Denial of Service Toolkit
UFONet is a powerful and controversial Python-based toolkit for testing and conducting Distributed Denial of Service (DDoS) attacks using unconventional methods, such as leveraging third-party web applications as attack vectors. It automates the discovery of vulnerable targets and enables attackers or researchers to launch large-scale amplification attacks without directly using botnets. While primarily intended for penetration testing and educational purposes, UFONet emphasizes anonymity through the use of proxies, TOR, and encrypted command channels. -
15
Scrapy
A fast, high-level web crawling and web scraping framework
Scrapy is a fast, open source, high-level framework for crawling websites and extracting structured data from these websites. Portable and written in Python, it can run on Windows, Linux, macOS and BSD. Scrapy is powerful, fast and simple, and also easily extensible. Simply write the rules to extract the data, and add new functionality if you wish without having to touch the core. Scrapy does the rest, and can be used in a number of applications. It can be used for data mining, monitoring... -
16
MailDev
Web Interface for viewing and testing emails during development
MailDev is an SMTP server with a web interface designed for viewing and testing emails during development. It allows developers to inspect and debug emails sent from their applications without delivering them to real inboxes. -
17
BeEF
The browser exploitation framework project
BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. ... -
18
SecLists
The Pentester’s Companion
...It is a collection of various types of lists commonly used during security assessments, all in one place. SecLists helps to increase efficiency and productivity in security testing by conveniently providing all the lists a security tester may need in one repository. List types include those for usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and many more. All the tester will have to do is pull this repo onto a new testing box and he’ll have access to every type of list he may require. -
19
Playwright for Java
Java version of the Playwright testing and automation library
Playwright Java is the Java version of the Playwright testing and automation library, enabling reliable end-to-end testing for modern web applications. -
20
UI.Vision RPA
Open-Source RPA Software (formerly Kantu)
...A huge benefit of doing visual tests is that you are not just checking one element or two elements at a time, you’re checking a whole section or page in one visual assertion. The visual UI testing and browser automation commands of UI.Vision RPA help web designers and developers to verify and validate the layout of websites and canvas elements. -
21
BurpSuite for Pentester
This cheatsheet is built for the Bug Bounty Hunters
BurpSuite for Pentester is a structured learning repository for web application security testing with Burp Suite. It is designed for penetration testers, bug bounty researchers, and learners who want a practical reference for Burp's major capabilities. The collection explains how different tools fit into vulnerability discovery, request analysis, and testing workflows. Covered areas include Proxy, Repeater, Intruder, Scanner, Sequencer, Collaborator, and several popular extensions. ... -
22
TestCafe
A Node.js tool to automate end-to-end web testing
TestCafe is a Node.js tool for automating end-to-end web testing. All you have to do is set it up, write tests in JS or TypeScript, run them and view the results. There’s no need for WebDrivers or other testing software. Installing TestCafe takes just one minute and one command. TestCafe lets you create smart, stable tests with no manual timeouts. It can run parallel tests, saving you on test execution time, and can even build readable tests with PageObject. ... -
23
go-mitmproxy
mitmproxy implemented with golang
go-mitmproxy is a Golang implementation of mitmproxy that supports man-in-the-middle attacks and parsing, monitoring, and tampering with HTTP/HTTPS traffic. Parses HTTP/HTTPS traffic and displays traffic details via a web interface. Supports a plugin mechanism for easily extending functionality. Various event hooks can be found in the examples directory. HTTPS certificate handling is compatible with mitmproxy and stored in the ~/.mitmproxy folder. If the root certificate is already trusted... -
24
cypress
Fast, easy and reliable testing for anything that runs in a browser
The web has evolved. Finally, testing has too. Fast, easy and reliable testing for anything that runs in a browser. Installing Cypress is simple. No dependencies, extra downloads, or changes to your code required. Write tests easily and quickly, and watch them execute in real time as you build your web application. Debugging your tests in CI is as easy as running tests locally. -
25
Wfuzz
Web application fuzzer
Wfuzz provides a framework to automate web applications security assessments and could help you to secure your web applications by finding and exploiting web application vulnerabilities. Wfuzz it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to be injected in any field of an HTTP request, allowing to perform complex web security attacks in different web...
