World of Testing

The OWASP Testing Project has been in development for many years. With this project, we wanted to help people
understand the what, why, when, where, and how of testing their web applications, and not just provide a simple checklist
or prescription of issues that should be addressed. The outcome of this project is a complete Testing Framework, from
which others can build their own testing programs or qualify other people’s processes. The Testing Guide describes in
details both the general Testing Framework and the techniques required to implement the framework in practice.

More on http://www.owasp.org/

Testing Certifications

2009-01-23T09:08:00.001-05:00

Following are the certifications available for QA/Testing

15 QTP sites/blogs/groups/forums

2009-01-23T08:53:00.001-05:00

QTP on Easy way to automate testing

There are a lot of QTP videos. Each QTP text tutorial contains screen shots.
So, this is a well-illustrated blog containing interesting info for QTP newcomers and professionals.
You can find here different QTP videos and tutorials. Example QTP video #1, #2, #3, #4, etc.
To get new QTP videos and articles automatically, you can subscribe to blog.

QTP Google group

This is a moderated QTP group. A great place for newcomers and professionals to improve knowledge and experience in QTP.
This is a very big QTP group - more than 1250 members as at Jan 19th, 2009. So all issues will be resolved quickly.
You can subscribe to this group here.
Before posting, please read Rules, FAQ, and others pages.

Quality Center on HP Forums

Office HP forum for all questions related to HP Quality Center.
Unfortunately, there is no subbranch of QTP-related questions.
There are a lot highly professional specialists on this forum, so visit this forum from time to time to improve your professional skills.

QTP on SQAForums

This is a QTP branch of SQAforums site. Moderated forums where you can find solutions to different QTP questions.
As a bonus, several HP QTP Support engineers share their knowledge and experience.
Before posting, please read forum guidelines.

AdvancedQTP site

Great site containing unique and interesting information about QTP.
Authors publish periodically articles about non-documented QTP features, investigations, books, etc.
Site contains internal forum.

KnowledgeInbox by Tarun Lalwani

Tarun Lalwani is well-known in QTP global community as a highly professional QTP engineer.
His site contains a lot of artciles about different QTP features and topics - Descriptive Programming, VBScript, and even original QTP tools.

Software Iinquisition site

Amazing site! Definetely, you will like their simple and clear QTP articles.
Authors (Marcus Merrell & Will Roden) describe parts of their Software Inquisition Foundation Library for QTP (a kind of QTP Framework), and many others interesting things.

Stefan Thelenius' blog

Don't want to waste your time developing and implementing Test Automation report, Test Suite Driver Script, and others interesting things? Read Stefan's blog.

HP QuickTest Professional Software site

Official HP QTP's site.
There is a lot of related information - documentation, demos, guides, downloads, news, and so on.

'Automated Chaos' blog

The blog does not contain too many QTP articles, but all of them are interesting and unique.
Use this practical experience to save your time while debugging your QTP script or implementing QTP framework.

Ankur Jain's blog

Yet another great blog about QTP and QTP-related issues. Ankur has the ability to describe complex things in simple terms.
Also, it's possible to ask questions in comments or on local forum.

Theo Moore's blog

Theo Moore is a man who knows everything :)
As for QTP, readers will find different articles to extend their theoretical knowledge and improve their practical experience.

HP Advanced Self-Solve Knowledge Search

'Knowledge Base' of QTP-related articles, manuals, documents, webinars, and others extremely useful documents.
Many artciles contains 'must know' technical information. Greate place to prepare for QTP certifications.
This site requires HP login.

QTP on tdforums

There is another good forum about QTP. Also, TDForum contains great info about working and tuning of Quality Center.
Site requres registration from corporate (not public) email account.

Mohan Kumar Kakarla's QTP blog

Site contains QTP scripts which can be a core of QTP Functions library. Real-life examples.

Other Blogs

http://qtpgoodtutorials.blogspot.com/
http://quicktesthp.blogspot.com/
http://mercuryquicktestprofessional.blogspot.com/2008/02/step-by-step-guide-to-learn-qtp.html
http://qtp.blogspot.com/

Useful website on Interview questions for Testing

2008-09-11T02:30:00.001-04:00

Listed based on categories.
http://interview-questions.googlemashups.com/

Fuzz Testing

2008-09-04T05:09:00.002-04:00

Fuzz testing or fuzzing is a software testing technique used to discover coding errors and security loopholes in software, operating systems or networks by inputting massive amounts of random data, called fuzz, to the system in an attempt to make it crash. If a vulnerability is found, a tool called a fuzz tester (or fuzzer), indicates potential causes. Fuzz testing was originally developed by Barton Miller at the University of Wisconsin in 1989.

Fuzzers work best for problems that can cause a program to crash, such as buffer overflow, cross-site scripting, denial of service attacks, format bugs and SQL injection. These schemes are often used by malicious hackers intent on wreaking the greatest possible amount of havoc in the least possible time. Fuzz testing is less effective for dealing with security threats that do not cause program crashes, such as spyware, some viruses, worms, Trojans and keyloggers.

Fuzz testing is simple and offers a high benefit-to-cost ratio. Fuzz testing can often reveal defects that are overlooked when software is written and debugged. Nevertheless, fuzz testing usually finds only the most serious faults. Fuzz testing alone cannot provide a complete picture of the overall security, quality or effectiveness of a program in a particular situation or application. Fuzzers are most effective when used in conjunction with extensive black box testing, beta testing and other proven debugging methods.
____________________________________________________________________

A fuzzer is a program that attempts to discover security vulnerabilities by sending random input to an application. If the program contains a vulnerability that can leads to an exception, crash, or server error (in the case of web applications), it can be determined that a vulnerability has been discovered. Fuzzers are often termed Fault Injectors for this reason, they generate faults and send them to an application. Generally, fuzzers are good at finding buffer overflow, DoS, SQL Injection, XSS, and Format String bugs. They do a poor job at finding vulnerabilites related to information disclosure, encryption flaws, and any other vulnerability that does not cause the program to crash.

Tools like iDefence ComRaider can help you to do this job. Install it from
http://labs.idefense.com/software/fuzzing.php#more_comraider

Web Testing Tools

2008-01-03T08:43:00.000-05:00

This tools listing has been organized into the following categories:

Software QA and Testing Resources

2008-01-03T08:26:00.000-05:00

1. Software Testing
2. Software Test Automation
3. Software Quality Assurance
4. Software Requirements Engineering
5. Software Metrics
6. Configuration Management
7. Software Risk Management
8. Software Engineering
9. Software Project Management

What to Measure In Software Testing

2008-01-03T08:11:00.000-05:00

There are well defined quantified metrics and metrics systems available today in software testing. Following are few metrics to measure in software testing.

1. Test Coverage: (Tests Conducted / Total Tests) * 100
2. Test Effectiveness: (Bugs Found in Test / Total Bugs Found) * 100
3. Team Test Effectiveness: (Bugs Found by Team / Total Bugs Found) * 100
4. Automation %: (Tests Automated / Total Tests) * 100
5. Automation Effectiveness: (Automated Tests Not needing maintenance / Tests Automated) * 100
6. Automation test coverage: (Automated Tests Conducted / Total Automated Tests) * 100

What is software testing?

2007-12-18T06:26:00.000-05:00

Software testing is the process used to measure the quality of developed computer software. Usually, quality is constrained to such topics as correctness, completeness, security, but can also include more technical requirements as described under the ISO standard ISO 9126, such as capability, reliability, efficiency, portability, maintainability, compatibility, and usability. Testing is a process of technical investigation, performed on behalf of stakeholders, that is intended to reveal quality-related information about the product with respect to the context in which it is intended to operate. This includes, but is not limited to, the process of executing a program or application with the intent of finding errors.