eValid vs Burp

Use and application of the eValid server loading (LoadTest) capability. And in the cloud computing context for monitoring and loading.

eValid vs Burp

Postby unsigned » Mon May 12, 2008 3:14 pm

After having looked at eValid and
others, I settled on using the Burp Suite for the testing I mentioned in the
original post, and if I need regression or functionality testing I think I
will opt for using Badboy.

The reasons - Burp suite easily performs what I wanted to do and a lot more
without any scripting etc, it also has given me more ideas on how to test
our apps, so for fuzzing and all that, its very good. For testing, well we
don't have many automated functionality tests as the apps we make aren;t big enough yet, though they soon will be I imagine, but for that purpose I just
found Badboy to be easier and more intuitive to use than eValid, it has its
glitches but is pretty good.
unsigned
 
Posts: 167
Joined: Tue Jan 01, 2008 12:48 pm

Re: eValid vs Burp

Postby serverloading » Mon May 12, 2008 3:16 pm

Burp Suite uses HTTP requests, which are piped to the browser
so you see pages, but the scan is on the HTTP text. eValid on the
other hand does the scan from the loaded page...

The HTTP technique will miss a lot of links.

Badboy suffers the same problem...HTTP based.

If I had to guess I would say you are missing 10%-20% of what
is there. But I'll admit, getting that last 20% is pretty
complicated.

Let us hear from you when the need for more accuracy arises.

To whet your appetite, take a look at:

* Here is a command that lets eValid find the sourceIndex of an
object on a page using a search process based on Regular Expressions:

http://www.e-Valid.com/Products/Documen ... nt.ex.html
eValid Tech Support Team
serverloading
 
Posts: 86
Joined: Tue Jan 01, 2008 12:48 pm


Return to Performance/Load Testing

Design Downloaded from free phpBB templates | free website templates | Free Web Buttons