Click to edit Master title style

WEB APPLICATION TESTING

BY:
JOSHUA MAKORI – SIT/0620/2019

SHARON MOMANYI – SIT/0454/2019

1
 Contents
Click to edit Master title style

1. Introduction
o Overview of web app testing

2. Web Application Testing Techniques

o Different types/techniques of Web App Testing in detail
o Testing tool(s) used in each testing technique

3. Web Application Testing Tools

o Curated list of various Web App Testing Tools

4. References

2 2
 Overview
Click to edit Master title style

What is Web Application Testing?

W e b A p p l i c a t i o n Te s t i n g r e f e r s t o c h e c k i n g y o u r w e b
application for potential bugs before its made live and is
accessible to general public.

W e b Te s t i n g c h e c k s f o r f u n c t i o n a l i t y, u s a b i l i t y, s e c u r i t y,
c o m p a t i b i l i t y, p e r f o r m a n c e o f t h e w e b a p p l i c a t i o n .

During this stage , issues such as that of web application

s e c u r i t y, t h e f u n c t i o n i n g o f t h e s i t e , i t s a c c e s s t o
handicapped as well as regular users and its ability to handle
t ra ff i c i s c h e c k e d .
3
 ClickWhy
to edit Master
is Web title style Testing important?
Application
We b t e s ti n g i s e s s e n ti a l a n d r e q u i r e d f o l l o w i n g t h e
d e v e l o p m e n t o f a fe a t u r e s i n c e w e c a n n o t e n s u r e t o t h e
c u s t o m e r t h e d e l i v e r y o f b u g - f r e e s o ft w a r e w i t h o u t a p r o p e r
w e b t e s ti n g p h a s e .
We b s i t e a p p t e s ti n g e n a b l e s t h e d e t e c ti o n a n d r e p o r ti n g o f
p r o d u c t d e fe c t s . I f t e s t e r s d o n o t p e r f o r m t h o r o u g h t e s ti n g ,
there is a high probability that end users may report issues.
T h e r i s k o f d e f e c t s a n d t h e p r o b a b i l i t y o f l o s i n g c u s t o m e r s
i s h i g h i f t e s t e r s d o n o t r u n r i g o r o u s w e b a p p l i c a ti o n t e s t s .
B y c o m p r o m i s i n g o n t h e s o ft w a r e ' s q u a l i t y, t h e r e i s a
n e g a ti v e i m p a c t o n t h e o r g a n i z a ti o n ' s r e p u t a ti o n .
4 4
Click to edit Master title style
Cont …
We b a p p te sti n g i s c r i ti ca l fo r d e l i ve r i n g h i g h -
q u a l i t y s o ft wa re . I t i s o n l y by p e r fo r m i n g we b
p a g e te sti n g t h at d e ve l o p e rs c a n e n s u re t h at
t h e p ro d u c t d o e s n o t h ave c r i ti c a l fl aws .
P ro v i d i n g b u g -f re e s o ft wa re i n t h e m a r ke t
att ra c t s n e w c u sto m e rs t h at e ve nt u a l l y d r i ve
re ve n u e g e n e rati o n .

5 5
 ClickBenefits
to edit Master
of Webtitle style
Application Testing
We b a p p t e s ti n g e n s u r e s t h e d e l i v e r y o f h i g h - q u a l i t y
w e b a p p l i c a ti o n s .
We b t e s ti n g a s s u r e s t h a t t h e s o ft w a r e i s f u l l y f u n c ti o n a l .
We b a p p t e s ti n g h e l p s i n i n c r e a s i n g c u s t o m e r s '
c o n fi d e n c e i n t h e a p p l i c a ti o n .  
S i n c e Q A t e s t e r s r u n r i g o r o u s t e s t s o n t h e w e b
a p p l i c a ti o n a t t h e e n d o f e a c h i t e r a ti o n a n d s p r i n t ,
t h e r e a r e fe w e r c h a n c e s o f r i s k a n d fa i l u r e i n t h e f u t u r e .
Te s ti n g a w e b a p p v i a a n a u t o m a t e d w e b t e s ti n g t o o l
s a v e s ti m e a n d e n s u r e s a p o s i ti v e r e t u r n o n i n v e s t m e n t .

6 6
Click to edit Master title style

Web Application
Testing Techniques

7 7
Howtotoedit
Click Test Web
Master Applications
title style
In Software Engineering, the following testing types/techniques may be
performed depending on your web testing requirements;
1. Functionality Testing
2. Usability testing
3. Interface Testing
4. Database Testing
5. Compatibility testing
6. Performance Testing
7. Security testing
8 8
1. Functionality
Click to edit MasterTesting
title style
Functionality Testing is a process that includes several testing parameters like user
interface, APIs, database testing, security testing, client and server testing and
basic website functionalities.

Web based Testing Activities includes:

Test all links in your webpages are working correctly and make sure there are no broken links.
Links to be checked will include: Outgoing links, Internal links and MailTo links

Test Forms are working as expected. This will include-

 Scripting checks on the form are working as expected. For example- if a user does not fill a
mandatory field in a form an error message is shown.
 Check default values are being populated
9 9
Continued…
Click to edit Master title style

Test Cookies are working as expected. Cookies are small files used by

websites to primarily remember active user sessions so you do not need to log
in every time you visit a website.

Test HTML and CSS to ensure that search engines can crawl your site easily.
This will include
 Checking for Syntax Errors
 Readable Color Schemas

Tools that can be used: QTP , IBM Rational , Selenium

1010
2. Usability
Click Testing
to edit Master title style

Usability testing can be carried out by testers like you or a small focus group similar
to the target audience of the web application. It is performed to verify the ease at
which the user interacts with the application.
Test the site Navigation:
 Menus, buttons or Links to different pages on your site should be easily visible and consistent
on all webpages

Test the Content:
 Content should be legible with no spelling or grammatical errors.
 Images if present should contain an “alt” text

Tools that can be used: Chalkmark, Contentsquare, and Clixpy

1111
3. Interface
Click Testing
to edit Master title style

It is performed to verify the interface and the dataflow from one system to other.
Three areas to be tested here are – Application, Web and Database Server
 Application: Test requests are sent correctly to the Database and output at the client side is
displayed correctly. Errors if any must be caught by the application and must be only shown to
the administrator and not the end user.
 Web Server: Test Web server if it is handling all application requests without any service denial.
 Database Server: Make sure queries sent to the database give expected results.

Test system response when connection between the three layers (Application, Web and

Database) cannot be established and appropriate message is shown to the end user.

Tools that can be used: Ranorex

1212
4. Database
Click Testing
to edit Master title style

Database is one critical component of your web application and stress must be laid
to test it thoroughly.

Testing activities will include-

 Test if any errors are shown while executing queries
 Data Integrity is maintained while creating, updating or deleting data in database.
 Check response time of queries and fine tune them if necessary.

Test data retrieved from your database is shown accurately in your web
application
Tools that can be used: QTP, Selenium 1313
5. Compatibility
Click to edit MasterTesting
title style

Compatibility tests ensures that your web application displays correctly across
different devices or platforms. This would include-
Browser Compatibility Test: Same website in different browsers will display differently. You
need to test if your web application is being displayed correctly across browsers, JavaScript,
AJAX and authentication is working fine. You may also check for Mobile Browser Compatibility.
Operating System Compatibility: Make sure your web app works fine for various combination of
Operating systems such as Windows, Linux, Mac and Browsers such as Firefox, Internet Explorer,
Safari etc.

Tools that can be used: Dynatrace

Link : https://www.dynatrace.com/solutions/application-monitoring/
1414
6. Performance
Click to edit MasterTesting
title style

Performed to verify the server response time and throughput under various load conditions. Testing
activities include:
 Load testing - Load testing will result in measuring important business critical transactions and load on
the database, application server, etc. are also monitored.

 Stress testing - It is performed to find the upper limit capacity of the system and also to determine how
the system performs if the current load goes well above the expected maximum.

 Soak testing - Soak Testing also known as endurance testing, is performed to determine the system
parameters under continuous expected load. During soak tests the parameters such as memory utilization
is monitored to detect memory leaks or other performance issues.
 Spike testing - Spike testing is performed by increasing the number of users suddenly by a very large
amount and measuring the performance of the system. The main aim is to determine whether the system
will be able to sustain the work load.

Tools that can be used: Loadrunner, JMeter

1515
7. Security
Click Testing
to edit Master title style
Performed to verify if the application is secured on web as data theft and unauthorized access are
more common issues and below are some of the techniques to verify the security level of the system.
Testing activities include:
 Test unauthorized access to secure pages should not be permitted
 Restricted files should not be downloadable without appropriate access
 Check sessions are automatically killed after prolonged user inactivity
 On use of SSL certificates, website should re-direct to encrypted SSL pages.

Security Testing is vital for e-commerce web applications that store sensitive customer information like
credit card numbers.

Tools that can be used: Intruder 1616

References
Click to edit Master title style

https://www.headspin.io/blog/a-complete-guide-to-web-app-testing

https://www.guru99.com/web-application-testing.html

https://www.tutorialspoint.com/software_testing_dictionary/web_application_testing.htm

1717
Click to edit Master title style

Web Application
Testing Tools

1818
 Overview
Click to edit Master title style

Web Application Testing Tools improve reliability, reduce

turnaround time and increase ROI (Return On Investment).
They are various types of tools that assist in diverse web
testing activities ranging from requirements capturing to
test management.
Following category of tools are covered that help in Web
Testing;

1919
1. Web
Click Automation
to edit Tools
Master title style
Intruder
Intruder is a powerful vulnerability scanner that will help you uncover the many weaknesses
lurking in your web applications and underlying infrastructure.

Features
 Checks for configuration weaknesses, missing patches, application weaknesses (such as SQL injection
& cross-site scripting) and more
 Automatic analysis and prioritisation of scan results

 Intuitive interface, quick to set-up and run your first scans

 Proactive security monitoring for the latest vulnerabilities

 AWS, Azure, and Google Cloud connectors

 API integration with your CI/CD pipeline

2020
Click to edit Master title style
Selenium

What is Selenium? - Video

Selenium is an open-source web

automation tool and currently the most
popular and widely used tool in the
market. It is one of the best website
automation tools which can automate
across multiple OS Like Windows, Mac,
and Linux and browsers like Firefox,
Chrome, IE, as well as Headless
Browsers
Selenium offers record and playback
features with its browser add-on
Selenium IDE. The powerful Selenium
WebDriver helps you create more
complex and advanced automation
scripts. 2121
Click
HP to (aka
UFT edit Master
QTP) title style
Video

HPE Unified Functional Test is leading

cross-platform automation web UI testing
tool.
It is one of the best website testing tools
that can automate Web, Desktop, SAP,
Delphi, Net, ActiveX, Flex, Java, Oracle,
Mobile, PeopleSoft, PowerBuilder, Siebel,
Stingray, Visual Basic amongst other
applications.

2222
2. Defect
Click to editTracking Tools
Master title style
BugZilla
BugZilla is a popular bug tracking tool. This web tester tool is an open source software and
provides some great features like
 E-mail notification for change in code

 Reports and Charts

 Patch Viewers

 List of bugs can be generated in different formats

 Schedule daily, monthly and weekly reports
 Detect duplicate bug automatically
 Setting bug priorities by involving customers
Predict the time a bug may get fixed

2323
3. Browser
Click Compatibility
to edit Master title styleTools
Ghostlab

Ghostlab offers synchronized testing for clicks, scrolls, reloads and form inputs
across all your connected devices.

It uses the superior built-in inspector to get to the bottom of any problem fast.

It connects to the DOM or JavaScript output on any device and effectively fixes

the code.

It is available for both Mac OS X and Windows with no setup required.

To keep track of file changes using the Ghostlab server, you can integrate pages
from your local directory, your localhost Apache set up or any other server.

2424
Click to edit Master title style
Browser Stack

With browser stack, it is possible to do web based browser testing on desktop

and mobile browser.

It is cloud based, and so it does not require any installation, and the pre-installed
developer tools are useful for quick cross-browser testing and debugging.

Besides, you can set up a comprehensive testing environment with support for
proxies, firewalls and Active Directory. It supports opera mobile, Android,
Windows (XP, 7 and 8), iOS, OSX snow leopard, lion and mountain lion and so on.
Browser stack allows you to test your pages remotely.

2525
4. Performance
Click to edit MasterTesting Tools
title style
LoadNinja
LoadNinja by SmartBear allows you to quickly create scriptless sophisticated load tests, reduce
testing time by 50%, replace load emulators with real browsers, and get actionable, browser-
based metrics, all at ninja speed. You can easily capture client-side interactions, debug in real
time, and identify performance problems immediately.

Features:
 Scriptless load test creation & playback with InstaPlay recorder
 Real browser load test execution at scale
 VU Debugger – debug tests in real time
 VU Inspector – manage virtual user activity in real time.

 Hosted on the cloud, no server machine & upkeep required

 Sophisticated browser-based metrics with analytics and reporting features

2626
Click to JMeter
Apache edit Master title style

JMeter is an open source tool that can be used Pros Cons

for performance and load testing for analyzing
 Highly portable and supports
and measuring the performance of a variety of 100% all the Java based apps  Cannot record HTTPS
services. This tools mainly used for web and  Less scripting efforts as
Communication

web service applications. compared to other tools because  Cannot intercept the AJAX
of its user-friendly GUI traffic

Features:  Simple charts and graphs  Is not capable of monitoring

sufficient for analyzing key load any of Application server
related statistics and resource related statistics
Does not demand state of the art infrastructure usage monitors.
 Reporting framework has
for load testing and supports multiple load  Supports Integrated real-time, very limited features
Tomcat collectors for Monitoring
injectors managed by a single controller

2727
References
Click to edit Master title style

https://www.guru99.com/top-20-web-testing-tools.html

https://theqalead.com/tools/best-web-application-testing-tools/

https://www.testrigtechnologies.com/know-the-best-web-application-testing-
tools-in-2020/

2828
Click to edit Master title style

Thank You

29