Open Source Rust Software Testing Tools

Zerocopy is a Rust library designed to make zero-cost memory manipulation both safe and effortless. It allows developers to reinterpret or convert raw byte sequences into structured types—and vice versa—without writing unsafe code directly. The crate provides safe abstractions for transmuting data while preserving Rust’s strict safety guarantees, removing the need for manual memory manipulation. Zerocopy introduces a suite of conversion traits such as TryFromBytes, FromBytes, IntoBytes, and FromZeros for defining how types can be safely constructed from or written to byte sequences. It also includes marker traits like KnownLayout, Immutable, and Unaligned to define type characteristics used in conversions. Complementing these traits are conversion macros that perform compile-time checks to ensure size and alignment safety, providing zero runtime overhead for unconditional casts.

DALFOX is an open-source security scanner focused on automated detection and verification of cross-site scripting vulnerabilities. Version 3 is implemented in Rust, while the earlier Go-based generation remains preserved on a separate branch. The tool can analyze URLs, files, piped input, and raw HTTP requests while examining parameters and possible injection points. Its engine covers reflected, stored, and DOM-based XSS together with static analysis and parameter discovery. WAF fingerprinting helps identify defensive filtering behavior, while multiple output formats support reporting and automation. Dalfox can also operate through a server mode, REST integrations, and an MCP interface. It is intended for authorized application-security testing, bug bounty work, and defensive vulnerability assessment.

Winrk is a modern high-performance HTTP benchmarking tool for Windows. Inspired by the popular wrk utility, Winrk provides similar capabilities but is fully compatible with the Windows platform, making it ideal for developers and testers who need to stress-test web servers without relying on Linux or WSL. Written in Rust, Winrk leverages native multithreading and asynchronous networking to generate a high number of requests per second with minimal overhead. It is easy to use, fast to deploy, and built with stability and precision in mind. Whether you're testing local services or public APIs, Winrk helps you analyze performance, latency, and throughput under load, right from the Windows command line. Source code: https://github.com/fomalhaut88/winrk

Chrono Mock is a tool for testers and developers: run one application as if it were a different date, and find out whether it actually worked. Set the clock to next year, freeze it, or speed it up so a 30-day trial expires in half an hour. The rest of the machine keeps the real time - your domain logon, your certificates and every other application carry on as normal. Chrono Mock comes with built-in QA calculator that speaks in QA terms rather than arithmetic: - Business days and holidays - United States and Poland at launch, including the US rule where a holiday landing on a Saturday is observed on the preceding Friday - Build the expression from controls, not from a sentence - a starting point plus steps (- 18 years, - 1 day, set time 23:59:59), with the intermediate result shown after each step - Presets that explain what they catch - trial end, month-end and quarter close, year-end rollover, epoch 0, the 2038 boundary - Every format at once, one click to copy

Drill is an HTTP load-testing application written in Rust. The main goal for this project is to build a really lightweight tool as an alternative to other that require JVM and other stuff. You can write benchmark files, in YAML format, describing all the stuff you want to test. It was inspired by Ansible syntax because it is really easy to use and extend. As you can see, you can play with interpolations in different ways. This will let you specify a benchmark with different requests and dependencies between them. Right now, the easiest way to get drill is to go to the latest release page and download the binary file for your platform. OpenSSL is needed in order to compile Drill, whether it is through cargo install or when compiling from source with cargo build.

Naughty Keyboard is a tool for testers and developers. One shortcut types the next awkward value into the field in front of you: null, a trailing space, a zero-width space, 30.02.2026, =1+1, a name of 65 535 characters. They are the values real users and real data produce, and a form you only ever tried with "John Smith" has never met them. Every value comes with what it usually breaks and what a correct application does instead. When one of them breaks something, one more shortcut copies a report block you can paste straight into a ticket. A window and a command line, over one engine. website: https://naughtykeyboard.donislawdev.com/

UUV is an open-source platform that automates accessibility testing for web. It helps development, QA, and accessibility teams detect accessibility issues early, improve software quality, and maintain compliance with standards such as WCAG, RGAA, RAWEB. The UUV Desktop Assistant allows users to inspect UI elements, verify accessibility properties, and automatically generate reusable Gherkin scenarios and accessibility assertions. Test execution produces detailed reports with errors, warnings, notices, and remediation guidance. The UUV Dashboard centralizes results from multiple projects, enabling teams to monitor accessibility metrics over time, identify regressions, compare executions, and track compliance progress through interactive reports. UUV integrates into CI/CD pipelines to support continuous accessibility testing throughout the software development lifecycle, reducing remediation costs while making digital services .