Open Source JSP Software Testing Tools

Official website on http://cerberus-testing.org/

A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be used to test the various properties of web application scanners. Visit WAVSEP homepage to learn more: https://code.google.com/p/wavsep/ The project includes the following test cases: Path Traversal/LFI: 816 test cases (GET & POST) Remote File Inclusion (XSS via RFI): 108 test cases (GET & POST) Reflected XSS: 66 test cases, implemented in 64 jsp pages (GET & POST) Error Based SQL Injection: 80 test cases, implemented in 76 jsp pages (GET & POST) Blind SQL Injection: 46 test cases, implemented in 44 jsp pages (GET & POST) Time Based SQL Injection: 10 test cases, implemented in 10 jsp pages (GET & POST)

AHrg is a development tool that combines the automation of Continuous Integration with Testing and Metrics capabilities.

Fronsetia (Free Online Service Testing Application) is a Java web application that allows testing webservices (REST and SOAP). No end-user installations required, just deploy the application on your server and pass the link so that users can use their usual browsers to access Fronsetia. You can think of Fronsetia as a simple version of SoapUI on the web, or a simple and free and open-source version of the "wls_utc" utility. See the project homepage https://fronsetia.sourceforge.io and the project Wiki in the menu above.

Easy tools suite & framework for fast development Enterprise Application. Quick start sample for using popular open-source projects. Strong Chinese support. ClearWork——中国中小企业快速构建信息系统的框架和复用工具集合。

The concept behind DataWoo is to create a Spring-based architecture that allows developers to jump-start their coding efforts by providing a hardened and secure foundation when developing new systems; it can also be used as a reference for incorporating new technologies into existing systems. DataWoo is meant to be a research and development platform that can be extended into just about any enterprise-level web application. The architecture will be developed in three phases: 1. Basic Spring Architecture: Provides all the basic components needed to field an enterprise-level application. 2. Programmatic Security Model: Incorporates the components needed to dynamically assign users to user roles and user roles to profiles. 3. Meta-Driven Architecture: Use meta-data to dynamically configure 80%-90% of the application using the concepts exemplified in the Compiere open source project.

Fake SMTP provides an easy way of testing email enabled application during development. This is a pltaform independent software written in Java, and based on the Dumbster project.

Genesis is a software engineer integrated tool that provides many ways to manage all artifacts related to a software development process. Includes requirements management functionalities, and a complete environment to execute tests.

Jdptool is a debug and profiler tool which based on JPDA; It provide both swing based and browser based GUI. It has sophisticated debugger without user interfere. It also provide profiler to memory usage and threads with numerous new feature

JspTest is a JUnit extension for testing JavaServer Pages outside a Servlet container. It uses the Jasper JSP compiler from Apache Tomcat and the Java compiler distributed as part of the system's default JDK. NOTE: DOWNLOAD LATEST VERSION WITH MAVEN 2

Information system to manage execution of manual test scripts. Includes comprehensive issue tracking linked to scripts. Web-based UI, JBoss app server. Standard role-based user access. Test cases written in Excel and loaded up to application using a tool

The OWASP Security Shepherd project enables users to learn or to improve upon existing manual penetration testing skills. Utilizing the OWASP top ten as a challenge test bed, common security vulnerabilities can be explored and their impact on a system understood. The by-product of this challenge game is the acquired skill to harden a player's own environment from OWASP top ten security risks. The modules have been crafted to provide not only a challenge for a security novice, but security professionals as well. If you'd like to download the V3.0 VM, you can download it from github: https://github.com/OWASP/SecurityShepherd/releases/tag/v3.0 Try it live: https://owasp.securityshepherd.eu Raise issues here: https://github.com/markdenihan/owaspSecurityShepherd/issues More Info here: https://www.owasp.org/index.php/OWASP_Security_Shepherd

OpenTCM is open-source test case managment web-application.

BugHunt Project's aim is to be a simple yet useful and easily extensible bug tracking system. Its architecture will provide a basic set of functionalities along with a concise framework for extending its capabilities.

mda4eclipse is a domain-driven and model-driven development eclipse plugin. Its purpose is to present a way of using different project sites to work together and establish a shared development environment.

qaManager is a platform independent web based application for managing QA Projects Effectively with very simple installation. qaManager has Project tracking, Resource Management, TC Management, Online Library, Alerts and more.It's Powered by OpenXava.