QA/Execution/Web Testing/Tools

Here is a list of suggested tools & resources

Continuous Deployment

• Etsy.com video: http://www.livestream.com/etsy/video?clipId=pla_adbab6e2-c629-4bfe-b1fd-21c898693282
• Flickr video: http://vimeo.com/24542044
• James Socol's blog post: http://coffeeonthekeyboard.com/the-future-of-sumo-development-511/

Performance and Load-Testing Tools

• Performance-testing Tools:
  • http://webpagetest.org
  • http://loadimpact.com/
  • Top 100 Load and Perf-testing tools

• Load-testing Tools:
  • HTML5 Validator
  • https://wiki.mozilla.org/QA/Execution/Web_Testing/Load_Testing
  • Apache Bench
  • AMO load tests
  • Siege
  • JMeter
    • POSTing repeated and/or random input to a website/application
    • Doesn't do JavaScript on its own
  • Grinder
  • NetSparker Community Edition
    • Fuzz-testing (first and foremost)
    • Server stress-testing (up to 200requests/second)
    • Community Edition doesn't do authenticated sessions
      • Unless you're stress-testing (in which case, please let IT/NetOps know ahead of time), then set the throttle to 3 or 4

• Link-checkers:
  • W3C's Link Checker
  • Xenu Windows link-checking app

• Tool lists
  • Various web-testing tools
  • Open Source Testing's great page on tools
  • User Agent Strings
  • Awesome Unicode stuff

Security

• Web QA Security Checklist
• Burp Suite; proxy for testing security
• OWASP
  • WebGoat security-learning tool

• Scanners/Fuzzers:
  • XSS Me
  • SQL Inject Me
  • Netsparker Community Edition
  • PowerFuzzer Windows fuzzing tool
  • Acunetix Community Edition scanner

Infrastructure / Server Info

Internal access only

• https://intranet.mozilla.org/WebSites

Tips and Pointers

• AMO
• SUMO
• Mozilla.com

Reference Links

• B2G Tips & Tricks
• Webdev
• Web Production Team
• Website Localization
• IT Acceptance
• IT's Service-Level Agreements
• Launch Checklist