Free Security testing tool ADF

Hi,
Anybody aware of any free security testing tools for testing web apps developed on adf framework.
We need to test for all types of injections and other possible vulnerabilities.
Thanks,
Rohit

I think Junit tests the data for use cases which we give them ..yes you are right.
sorry i may misundertsood from you of previous post? sorry for that.
whereas I am looking for a tool which scans my code and looks out for vulnerabilities inside my code.I dont think that kind of tool may available. but if i found out. i will post it here.
if you found post here. it helpful for all.
I am not sure if Junit also does that ?yes absoultely.
For example if I have written a functions that creates dymanic SQL query :
1. The tool should check it and let me know if there are any any possible SQL injections possible through the code.
About SQL injections
kind note from an experts(john). go through out thread
method holds some select clause
Is there any free tool available meeting such requirements in ADF framework.i think some experts will better comment on it. about his.

Similar Messages

  • Free load test tool

    Hello all,
    are there any free load testing tool for sql queryl ?? We have this sql that i want to change and use a parallel hint....so i wanted to load test...maybe 50 concurrent user executing that at the same time....and see how the performance is on the server ...are there any freeware tool for that or anything that i can do ?? i am on 10.2.0.3 (AIX)....

    I'm a bit confused.
    Parallel query improves performance by allowing one session to use more of the database's resources than a single session could normally utilize. That makes it ideal for data warehouse environments where there are few concurrent users each running very resource intensive SQL statements. Parallel query is poorly suited, in general, for OLTP workloads because letting one session spawn multiple slave processes takes resources away from other sessions. If you really have 50 users simultaneously running a query, it should almost certainly not be parallelized. Even if each session creates only 2 slave processes, that's 100 simultaneous slave processes which probably overloads anything below, say, a 64-core box. Hopefully, your database is configured, in that case, to disable parallelism to avoid overloading the server. But if the database is configured to disable parallelism in that case, adding the PARALLEL hint will have no effect at high load.
    Justin

  • Coldfusion Stress-test Tool?

    Does anyone know of a good free stress test tool that can be used on a Coldfusion website?  We're having some issues with Mura running slow in our production environment.

    JMeter.  It ships with Sun's JDK.
    Adam

  • Stress test tool and guidelines for tuning ADF 11g

    Hi all,
    I am working our ADF 11g application on load & stress testing. The load test works fine with some millions of full dummy rows (this generated data tool is easily written by ourself). The tunning only was done with only indexing. But with stress I'm concerning with RAM and other tunning parameters such IO and share pool from OS to DB and to WL servers and how to tune it for around 200-300 concurrent connections. I'm studying Jmeter for this purpose but still not get the answer. I have tested with Oracle Openscript but it worked very heavily slow :(.
    The question here is that do you have any experiences on tuning parameters for such requirements and what is the best automatic test tool for testing multi-connections, please advise me.
    Thank you very much.

    Oracle Application Testing Suite has specific support for ADF testing:
    http://www.oracle.com/technetwork/oem/app-test/index.html
    http://www.testingreflections.com/node/view/8538
    Some info on JMeter: http://www.connotea.org/user/jdeveloper/tag/jmeter
    Another option: http://www.yenlo.nl/harryvanoosten/2010/03/10/load-testing-an-adf-11g-application/
    Some entries about tuning: http://www.connotea.org/user/jdeveloper/tag/tuning

  • Need information on open source testing tools for ADF web applications

    Hi experts,
    I need to investigate on new feasible open source Java testing tools for testing ADF web applications. I have tried to google a lot but getting confused.
    My requirements as as under:
    1. The tool must be open source.
    2. It should be easy to understand and to work upon by the tester and developers.
    Selenium based testing approach is already in place for testing the application but need to search for tools other than Selenium which shall prove suitable for testing ADF applications. Kindly let me know your inputs / suggestions.
    Thanks a lot in advance.
    Neelanand

    Hi,
    Have a look at JMeter http://jakarta.apache.org/jmeter/index.html
    1. The tool must be open source.It is.
    2. It should be easy to understand and to work upon by the tester and developers.I guess it is.
    There are some specifics in configuring it for ADF, but Chris Muir wrote a nice blog about how it's done, check it out http://one-size-doesnt-fit-all.blogspot.com/2010/04/configuring-apache-jmeter-specifically.html
    Pedja

  • Do you know any security breach in broad band speed test tools?

    do you know any security breach in broad band speed test tools?

    Ive yet to heard of a single mention of same.  Stay on well known sites such as
    http://www.speakeasy.net/speedtest/
    there are many of them.

  • Does anyone know if Cisco has a free network security audit tool?

    Does anyone know if Cisco has a free network security audit too

    No there is no free network security audit tool but you can using any of the commercial and open source tools for the same purpose
    **********Do rate helpful posts*************

  • Stress test tool for EBS

    Hi Hsawwan, other EBS APPS dba's!
    We are trying to predict some performance according future load on EBS. This is classic stress test techniques. We want to automate stress on APPS side and run some requests and forms as well....
    With "Load runner" we have unsolvable problems....
    What can we use for that?
    THX,
    Damir Vadas

    Damir,
    With "Load runner" we have unsolvable problems....What do you mean by unsolvable problems?
    What can we use for that?You may try OpenSTA.
    OpenSTA Users Home Page - Free Web Load and Stress Testing Tool
    http://www.opensta.org/
    Also, have a look at the following links:
    Automated Testing for the E-Business Suite
    http://blogs.oracle.com/stevenChan/2006/06/automated_testing_for_the_ebus.html
    Breaking Oracle Presentation
    http://www.psoug.org/pres/ukoug08_breaking_oracle.pdf

  • Stress test tools??

    Does anyone know of a stress test tool that can be used to grade Oracle forms on an Oracle application server v. 9i?

    Hi this is a tools that i found on apache web site, it is free and it works well for test stress on web server with forms
    http://jakarta.apache.org/jmeter/index.html
    Bye

  • FAQs with respect to extended Computer Aided Test Tool (eCATT) - Part 1

    Dear  Community Members,
                                                                                    Please find the answers to the threads that can be frequently asked in the forum.
    1. What is eCATT?
        extended Computer Aided Test Tool (eCATT) to create and execute functional tests for software. The primary aim is the automatic testing of SAP business processes. Each test generates a detailed log that documents the test process and results.
    eCATT enables automatic testing in SAP GUI for Windows and SAP GUI for Java. In order to offer a complete test solution that covers other GUIs, eCATT has interfaces to third party tools.
    See Also 1. eCATT - An Introduction (PART I)
    /people/sapna.modi/blog/2006/04/10/ecatt--an-introduction-part-i
    2. What are the features of eCATT?
    You can:
    ·        Test transactions, reports, and scenarios
    ·        Call BAPIs and function modules
    ·        Test remote systems
    ·        Check authorizations (user profiles)
    ·        Test updates (database, applications, GUI)
    ·        Test the effect of changes to customizing settings
    ·        Check system messages
    3. How to record a transaction using TCD driver or command ?
    See link: eCATT Scripts Creation u2013 TCD Mode (PART II)
                   /people/sapna.modi/blog/2006/04/10/ecatt-scripts-creation-150-tcd-mode-part-ii
    4. How to record a transaction using SAPGUI driver or command ?
    See link: eCATT Scripts Creation - SAPGUI Mode (PART III)
                   /people/sapna.modi/blog/2006/04/10/ecatt-scripts-creation--sapgui-mode-part-iii
    5. What is Parameterization, Test Data, Test Configuration,System Data and how to create them in eCATT?
    See link: eCATT Chaining, Parameterization, Creation Of Test Data,Test Configuration, System Data (PART IV)
                 /people/sapna.modi/blog/2006/04/18/ecatt-chaining-parameterization-creation-of-test-datatest-configuration-system-data-part-iv
    6. What is Test Workbench and How is it Managed?
    See Link: eCATT Scripts Management Via Test Workbench (PART V)
                   /people/sapna.modi/blog/2006/04/13/ecatt-scripts-management-via-test-workbench-part-v
    7. What is eCATT Log?
    See Link: eCATT Logs (PART VI)
                   /people/sapna.modi/blog/2006/04/18/ecatt-logs-part-vi
    Continued.
    Thanks and Kind Regards
    Mohan Kumar K
    eCATT Forum Moderator

    PMU reset does not get rid of it sorry to say and logic board replacement does nothing to cure it. They all have this problem I believe, and it could very well be the battery that is the culprit, and a recall might be on the way for the batteries or a firmware update. Who knows at this point, this is an inherent reality of first gen Apple portables (products also), they are never bug free, if you buy a MBP now, you should know what you are getting into and try to deal with it as best as you can, if you don't have the "stugots" to deal with these issues and document them, wait for the 3rd and 4th gen, those are usually bug free, but end of life also.
    Take it easy and don't worry, they will fix it soon, they just need documentation of the problem, half the battle has been won.
    --Felix

  • Load Test Tools for CC&B 2.2?

    We are evaluating four load test tools for CC&B 2.2. JMeter (Free), BadBoy (Free), TheGrinder3 (Free), Selenium (Free) and Loadrunner 9.5.1.
    1) Does anyone out there have a load test success story to share? If so, be sure to mention which tool or tool combination.
    2) Can anyone recommend another solution we might want to evaluate?
    3) It appears none of these tools work "out of the box" with CC&B. GUI rendering mode fails ajax calls. Does anyone have a trick for working around/through this issue?
    At this point, it appears the best options are:
    1) Use a combination of JMeter and BadBoy. We record the gui navigation in BadBoy and run the script in JMeter. JMeter doesn't support https GUI capture, but it seems to be the better tool for running the scripts and analyzing the results. BOTH TOOLS ARE FREE.
    2) Loadrunner VuGen. Fails on replay due to the ajax calls. Manual scripting is the only workaround found so far.
    TheGrinder3 has no GUI replay. You can't watch the replay. Also, passwords are clear text.
    Selenium only works with Firefox. LVVWD doesn't use/support firefox.
    I should also mention that our criteria assumes minimal load testing in the near future and are trying very hard to avoid spending big $$$ for upgrade and maintenance fees.

    My company used AppLoader to run tests through NRG Global. We didn’t have a lot of people to dedicate to the testing, so we paid NRG a consulting fee to do it for us (for surprisingly less than we thought!). We had them test a Citrix & .net client/server application (with 300 users) and an Apache web application with Ajax (150 users). AppLoader is protocol independent, so it worked just fine with both. Also, it tests from the front end, so you can watch the GUI replay. They also have password encryption, although we didn’t use it for our tests.
    They were able to run the tests & get the data back to us quickly. We ended up with some failures & errors, but they gave us a detailed report with screenshots, logs & graphs which enabled us to find the problem, get it fixed and get our application up quickly. Turns out we had a memory leak. It was a relief to have the test done so fast, thorough & without the huge price tag. I spoke with the consultant there directly. She was very nice & helpful walking me through the results. Hope that helps. Good luck!

  • Automate QA testting Oracle ADF applications

    Is there a method/tool to automate QA testing on ADF fusion web applications.

    User,
    Yes, but QA or even "Quality Assurance" can mean about 1 million and 1 things to 1 million people. I mean, describe what type of testing you mean - you did so, automated UI testing.
    Have a look at [url http://seleniumhq.org/]Selenium (there are more, but it's the one with which I'm familiar).
    John

  • Error while using Test tool -WE19

    Hi All,
    When I am trying to use Test tool for IDOC processing ( WE19) in R/3 System for any  Basic Type ,for example: PEXR2002 and select the Standard Outbound Processing, I am getting the message as “Port does not exist in the table of port descriptions.”
    Is this error something where port configuration is missing or some standard error.
    Please provide your inputs.
    Regards
    Pragya Dubey

    Hello Dubey,
    Check it once u r configaration..
    Step by Step Procedure..
    Create the tRFC port definition
    Refer to the following steps to create the tRFC port definition.
    1. SAP transaction code: WE21 – Type /nwe21 on the SAP input window and press the
    Enter key.
    2. Highlight Transactional RFC.
    3. Click the Port pull-down menu, which is located in the upper left corner of the SAP
    screen. Click Create (or press F7).
    4. Select the own port name radio button.
    5. Type a port name such as ALEport. If you use a port name different from this, update
    Table 2 at the beginning of this chapter for future reference.
    6. Click the green check icon to continue.
    7. Fill in the description field with tRFC port (You are free to write anything you want here).
    8. Fill in the RFC destination field with ALESERVER. This must match the name you used on the previous RFC Destination step. If the name you enter here does not exist, the
    system will flag an error and you will need to provide an existing RFC destination.
    9. Make sure that IDoc record types SAP Release 4.x is selected.
    10. Click on save.
    Thanks,
    Satya Kumar
    Reward points if it is useful..

  • SAP QTP testing tool

    Hi guys,
    Please any one help me, how SAP QTP testing tool working.

    Hi ,
    QTP is an Automation testing tool from HP. QTP requires SAP Add-in to automate SAP testing. Feel free to ask anything else to know ..
    Srinivas Reddy
    Edited by: Srinivasrd on Jun 10, 2011 11:50 AM

  • SAP java Testing Tool

    Can anyone suggest the best SAP Java testing tool that supports NWDS?

    Hi ,
    QTP is an Automation testing tool from HP. QTP requires SAP Add-in to automate SAP testing. Feel free to ask anything else to know ..
    Srinivas Reddy
    Edited by: Srinivasrd on Jun 10, 2011 11:50 AM

Maybe you are looking for

  • Iphone 5c no longer charges since updating to ios 8.1.2

    I have updated my iphone 5C to IOS 8.1.2 and since then I can no longer charge my phone properly.  The only way I can charge is connecting the cable to my pc and charging through the pc or laptop.  It no longer works if I connect my phone directly to

  • Camera Raw and Black & White Pictures

    I am using Potoshop Elements 7.0 and I just downloaded the latest camera raw (5.2). However, both with the old and new camera raw plug when I import black & white pictures from my Nikon D80 in NEF format I see them as colour pictures in the PSE organ

  • I've lost my adjust panel, how do I get it back?

    I seem to have lost the "adjust panel" for editing photo's in IPhoto 5.0.4. I've tried to edit from both the library and in albums. This seems to have happened after a recent upgrade to 10.4.3 and shortly thereafter a memory upgrade from 512MB's to 1

  • Hardware Driver Issues

    HP Compaq Presario CQ70-116EA : P/N NG504EA Windows Vista 32-bit 2 Issues Device : BCD-CD V 01.02.01.01 1.11 USB Device Error : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Device : TSSTco

  • BP balance due is 0 but account balance is 1 cent

    Dear All, When I open a BP master data, I got a 1cent account balance. Then I click the arrow of account balance. In the account balance window, the balance due is 0. Is this a SAP bug or anything wrong on the end user side? Thanks a lot. Regards, Yu