Re: [PEN-TEST] Web application testing tools

["Butters, Kevin" <Kevin_Butters () NAI COM>]

I used MS's Homer stress tool downloadable for free from Microsoft. You will
have to do some searching Microsoft doesn't call it the Homer tool. Its
called Homer after its developers. Microsoft calls it some kind of Web
Application test tool or something.

Kevin Butters
Network Associates Inc.


-----Original Message-----
From: Loschiavo, Dave [mailto:DLoschiavo () FRCC CC CA US]
Sent: Tuesday, October 10, 2000 2:53 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] Web application testing tools


Sanctum (http://www.sanctuminc.com/) puts a product called AppScan that you
might be interested in. I'm in the process of filling out the NDA so I can
get a demo version. It ain't cheap, but if you need the ability it claims to
offer (and it delivers on the claims) it should be a must-have product.

-----Original Message-----
From: Eaton, Dave
To: PEN-TEST () SECURITYFOCUS COM
Sent: 10/10/00 2:16 PM
Subject: [PEN-TEST] Web application testing tools

I have been asked to look for tools that can be used to test our web
applications, both from a security and a performance standpoint.  I
would
appreciate any comments on existing tools, both commercially available
and
free-ware.  All suggestions and comments welcome.
TIA...... dave


Dave Eaton, Systems Associate
e-Information Services
Eastman Chemical Company
deaton () eastman com  Phone: 423.229.3032