黑盒测试软件
我们即将获得一个罐装包装，其中已根据我们的需要进行了修改。 我是为其准备测试的团队的一员。 它有一个 Oracle 后端，我相信它是用 C++ .NET 编写的。
我的问题是您会推荐哪些免费或开源测试工具。
谢谢
肯
We are about to get a canned package in that has been modified to our needs. I'm part of the team setup to prepare tests for it. It has an Oracle back end and I believe it's written in C++ .NET.
My question is what free or open source testing tools would you recommend.
Thanks
Ken
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（6）
对于我们的应用程序的回归测试，我使用一个名为 AutoHotKey http://www.autohotkey.com/ 的免费工具。 它简单、可批量配置，并且几乎适用于您拥有的任何应用程序。 不完全是为黑盒测试而设计的，但却是一个很好的免费工具，可以添加到您的工具箱中。
虽然有一些很好的商业应用程序可用于应用程序的黑盒测试（HoloDeck http://www.sisecure.com/holodeck/index.shtml" rel="nofollow noreferrer">http://www. sisecure.com/holodeck/index.shtml，Cenzic Hailstorm http://www.cenzic.com/< /a>），据我所知，唯一的开源应用程序仅测试网络安全（Spike http: //www.immunitysec.com/resources-freesoftware.shtml，OWASP WebScarab http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project 和 Nikto http: //www.cirt.net/nikto2）
For regression testing of our applications I use a free tool called AutoHotKey http://www.autohotkey.com/. It is simple, batch configurable, and can work for virtually any application you have. Not exactly designed for black box testing, but a good free tool to add to your toolbox.
While there are a few good commercial applications for black box testing of applications (HoloDeck http://www.sisecure.com/holodeck/index.shtml, Cenzic Hailstorm http://www.cenzic.com/), the only open source applications that I know about only test network security (Spike http://www.immunitysec.com/resources-freesoftware.shtml, OWASP WebScarab http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project, and Nikto http://www.cirt.net/nikto2)
测试，无论是功能性还是非功能性，不参考
组件或系统的内部结构。
Testing, either functional or non-functional, without reference to the
internal structure of the component or system.
同意其他人的观点 - 由于应用程序已根据您的需求进行了修改，因此您应该确保它实际上是根据您的需求进行修改的。
如果程序集没有被混淆，您可以使用 FxCop 来分析二进制文件并查看是否存在任何严重错误（注意 - 如果您不熟悉 fxcop 和静态分析，请在报告大量错误之前找到熟悉的人不会被修复）。
除此之外，您还需要寻找更多的技术和工具来完成工作。
Agree with the others - since the application has been modified to your needs, you should make sure that it actually is modified to your needs.
If the assembly isn't obfuscated, you can use FxCop to analyze the binaries and see if there are any critical bugs (note - if you're not familiar with fxcop and static analysis, find someone who is before reporting a ton of bugs that won't be fixed).
Beyond that, you're looking at more techniques vs. tools to get the job done.
听起来你已经知道你想检查什么了。 作为自定义应用程序，您最好的选择是设计一个测试计划并手动测试您想要验证的值。
For what is sounds like you already know what it is that you want to check. Being a custom application your best bet would be to devise a test plan and manually test the values that you would like to validate.
您对这样的工具有何期望？ 我不知道有什么工具可以任意测试任何软件。
What do you expect from such a tool? I don't know of any tool that can arbitrarily test any piece of software.
值检查。 查看是否仅豁免有效日期、除完整范围之外的数字字段等。
Value checking. See if only valid dates are exempted, number fields except the full range, ect.