Showing posts with label Tools. Show all posts
Showing posts with label Tools. Show all posts

Friday, September 4, 2009

DevExpress has updated its CodeRush Xpress tool

DevExpress has updated its free CodeRush Xpress tool for Visual Studio. Here are some of the changes:

Faster Performance
Reduced Memory Consumption
Support for Preprocessor Directives
Background Processing Progress Bar



Thursday, December 11, 2008

CHESS: An Automated Concurrency Testing Tool

CHESS is an automated tool from Microsoft Research for finding errors in multithreaded software by systematic exploration of thread schedules. It finds errors, such as data-races, deadlocks, hangs, and data-corruption induced access violations, that are extremely hard to find with current testing tools. Once CHESS locates an error, it provides a fully repeatable execution of the program leading to the error, thus greatly aiding the debugging process. In addition, CHESS provides a valuable and novel notion of test coverage suitable for multithreaded programs. CHESS can use existing concurrent test cases and is therefore easy to deploy. Both developers and testers should find CHESS useful.


Monday, January 21, 2008

Wednesday, December 12, 2007

Retrace : A SQL Profiler Trace Swiss Army Knife

Have you ever needed to find your most expensive queries and quickly grew weary of writing T-SQL against trace tables to try to ferret them out? Have you ever had to wade through gigabytes of trace data just to find one ill-behaving query? Have you ever struggled to decide what performance metrics really matter when analyzing Profiler traces: duration, reads, writes, etc? Ken Henderson's post is about a new tool Bart and Ken wrote to help you do all this and more.

Check it out here: http://blogs.msdn.com/khen1234/archive/2007/12/12/a-sql-profiler-trace-swiss-army-knife.aspx

Monday, August 27, 2007

Reflector updated for Orcas Beta 2

Reflector for .NET
Reflector is the class browser, explorer, analyzer and documentation viewer for .NET. Reflector allows to easily view, navigate, search, decompile and analyze .NET assemblies in C#, Visual Basic and IL.

Download it here: http://www.aisto.com/Roeder/DotNet/

Monday, August 6, 2007

A Developers Toolkit of free tools for C# and .Net

All the tools are freely available for download online (with the exception of the full Visual Studio 2005 suite).

Categories
IDE
Profiling Tools
Debugging
Code Analysis Tools
Unit Testing Tools
Documentation Tools
Compliance Tools
Build Tools
Contiuous Integration Tools
Source Control Tools

Get the full detailed list here: http://blog.lowesoftware.com/software-development/a-developers-toolkit-for-c-and-net

Wednesday, July 25, 2007

YSlow: Speed up your web pages

YSlow analyzes web pages and tells you why they're slow based on the rules for high performance web sites. YSlow is a Firefox add-on integrated with the popular Firebug web development tool. YSlow gives you:
Performance report card
HTTP/HTML summary
List of components in the page
Tools including JSLint

Learn more and download YSlow here: http://developer.yahoo.com/yslow/

Thursday, June 21, 2007

ReSharper 3.0 Released By JetBrains

JetBrains, the creators of intelligent, productivity-enhancing applications, today announced the release of ReSharper version 3.0, the company's award-winning intelligent productivity add-in for Microsoft Visual Studio. This release is spearheaded by a major expansion into new languages, with full-featured support for Visual Basic .NET, XML and XAML, backed by comprehensive cross-language functionality.
It also brings a host of new productivity-enhancing features such as an in-depth code analysis for C#, a superior unit testing solution, efficient handling of To-do lists, plus a number of new time-saving navigation and search commands.

"With this release we are embracing a greater part of the Visual Studio world by supporting developers who work in more than C#," said Valentin Kipiatkov, JetBrains' Chief Technology Officer. " In addition, we have found yet more ways to improve the Visual Studio experience for our users, from intelligent and insightful code analysis, to our
Go to Symbol' navigation, to enhanced unit testing, to support of XML and XAML. At the end of the day, improving a developer's coding experience is what our business is all about."

Significant improvements and new features in ReSharper 3.0 include:

Unrivalled C# code analysis.
In addition to detecting new warnings and errors on-the-fly, ReSharper offers code suggestions. This feature gives insight into your code by offering an intelligent analysis of actual and potential errors. The code suggestion feature even notices questionable code design - all while you type.
Multiple productivity enhancers across all languages. The most far-reaching navigation/search feature of all, �Go to Symbol', will help developers to find any file member in their solution in seconds. Other additions include a revamped Unit Test Explorer, a To-do Explorer - a feature that keeps track of to-do notes solution-wide, even in closed files, and more.
Full-featured Visual Basic .NET support. The majority of ReSharper's features are now available for VB.NET code, including smart navigation and search, code refactorings, smart code completion options, code assistance, code generation and more - all resulting in a truly enhanced Visual Basic .NET experience in Visual Studio.
Cross-language functionality. ReSharper ensures interoperability in working with mixed C# and Visual Basic projects: usage search, refactorings, quick-fixes and context actions take into account all code written in either language, whenever possible.
XML and XAML support. Extensive support for XML and XAML is now available, answering the needs of many of our existing and potential users.
Considering ReSharper's increased value to different user groups, in addition to regular full-featured ReSharper 3.0 we are offering two pared-down editions: C# and VB.NET. These language-focused editions exclude a part of the functionality and cost a fraction of the full price.

Complete product information about JetBrains ReSharper is available at http://www.jetbrains.com/resharper?rs30pr

ReSharper 3.0 is available for a 30-day free trial download at http://www.jetbrains.com/resharper/download/?rs30pr. No evaluation licenses are required.

New customers can purchase ReSharper 3.0 online at http://www.jetbrains.com/resharper/buy/?rs30pr


Code Assistance, Navigation/Search and other productivity features
Navigation and Search:

"Go to symbol" — navigate to any symbol by its short name, with a single shortcut.
Go to next/prev error action
Command to locate current file in Solution Explorer
Find symbols referenced from type or type member
Find code dependent on referenced assembly (renamed feature) or on project (new feature)
Advanced Find Usages: new UI and ability to specify arbitrary base member to search for
Highlight usages of expression in file
Type hierarchy view enhancements
Two new view modes — show interface leaves, show concrete types
Members panel added
Filter occurrences of attributes by usage in [attribute]


Code completion:
Smart completion for type arguments
Smart completion for generic method arguments
Smart completion in catch clause for Exception parameter — give name to unnamed caught exception
Alt-Ins in Solution Explorer to create a new file from template
Automatic member reordering
Parameter information for named parameters in attributes
Advanced type choosing control in Refactoring UI
Mark quasi-implementations with italic font in "Go to base/derived"
Move statements in code blocks
Move parameters in method signature
Option to generate operators in "Generate Equals & GetHashCode"
"Generate delegating members" includes base as possible target (e.g. for publishing protected members of base type)
Noticeably improved stack trace explorer


C# Code Inspections
Code inspections are capable of detecting erroneous or suspicious code. A developer is however responsible for fixing it or not. You can find some examples on the dedicated C# code analysis page. The folowing inspections are available:

Check parameter name in ArgumentException family
Redundant interface specification in list of implemented interfaces
Redundant attribute parenthesis if empty argument list
Comparison of unconstrained generic value with null
Field could be made readonly
Redundant explicit delegate creation for method
Partial type with single part
Method return value is unused
Overriding obsolete member without specifying obsolete attribute
Assignment in condition
Parameter could be declared with base type
Conditional ternary expression could be re-written as coalescing expression
For statement condition is always true
Redundant unsafe context declaration
Analysis for namespace doesn't correspond to file location
Support compiler warning levels set in project properties
Support specific warning suppressed in project properties, including "member not documented"
Ability to specify custom formatting methods for analysis (like string.Format)




Context Actions
Extract anonymous method to method of the type
Inline method body as anonymous delegate
Replace ArrayList with List
Convert catch(Exception) to catch and vice versa
Insert code to check if parameter is null and throw ArgumentNullException
Copy documentation comments from base
Create overload without parameter(s)
Initialize field from constructor parameter
Rename file to match type name
Move variable to outer scope
Add another accessor to property or event
Split string literal
Replace variable declared at outer scope with several variable declared in inner scopes, when they are independent
Surround string with string.Format()
Move member declaration(s) to another type part
Make abstract member virtual
Replace string checks with string.IsNullOrEmpty() method call
Override virtual member in derived type

Tuesday, May 29, 2007

Free SQL Injection Scanners

SQLIer - SQLIer takes a vulnerable URL and attempts to determine all the necessary information to exploit the SQL Injection vulnerability by itself, requiring no user interaction at all. Download SQLIer.

SQLbftools - SQLbftools is a collection of tools to retrieve MySQL information available using a blind SQL Injection attack. Download SQLbftools.

SQL Injection Brute-forcer - SQLibf is a tool for automatizing the work of detecting and exploiting SQL Injection vulnerabilities. SQLibf can work in Visible and Blind SQL Injection. It works by doing simple logic SQL operations to determine the exposure level of the vulnerable application. Download SQLLibf.

SQLBrute - SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities. It supports time based and error based exploit types on Microsoft SQL Server, and error based exploit on Oracle. It is written in Python, uses multi-threading, and doesn’t require non-standard libraries. Download SQLBrute.

BobCat - BobCat is a tool to aid an auditor in taking full advantage of SQL injection vulnerabilities. It is based on AppSecInc research. It can list the linked severs, database schema, and allow the retrieval of data from any table that the current application user has access to. Download BobCat.

SQLMap - SQLMap is an automatic blind SQL injection tool, developed in python, capable to perform an active database management system fingerprint, enumerate entire remote databases and much more. The aim of SQLMap is to implement a fully functional database management system tool which takes advantages of web application programming security flaws which lead to SQL injection vulnerabilities. Download SQLMap.

Absinthe - Absinthe is a GUI-based tool that automates the process of downloading the schema and contents of a database that is vulnerable to Blind SQL Injection. Download Absinthe.

SQL Injection Pen-testing Tool - The SQL Injection Tool is a GUI-based utility designed to examine database through vulnerabilities in web-applications. Download SQL Injection Pen-testing tool.

SQID - SQL Injection digger (SQLID) is a command line program that looks for SQL injections and common errors in websites. It can perform the follwing operations: look for SQL injection in a web pages and test submit forms for possible SQL injection vulnerabilities. Download SQID.

Blind SQL Injection Perl Tool - bsqlbf is a Perl script that lets auditors retrieve information from web sites that are vulnerable to SQL Injection. Download Blind SQL Injection Perl Tool.

SQL Power Injection Injector - SQL Power Injection helps the penetration tester to inject SQL commands on a web page. It’s main strength is its capacity to automate tedious blind SQL injection with several threads. Download SQL Power Injection.

FJ-Injector Framwork - FG-Injector is a free open source framework designed to help find SQL injection vulnerabilities in web applications. It includes a proxy feature for intercepting and modifying HTTP requests, and an interface for automating SQL injection exploitation. Download FJ-Injector Framework.

SQLNinja - SQLNinja is a tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end database. Download SQLNinja.



If you are using a lot of dynamic SQL then don't forget to read The Curse and Blessings of Dynamic SQL written by Erland Sommarskog, SQL Server MVP.

Saturday, May 26, 2007

MbUnit 2.4 Released

Download it here: http://mb-unit.googlecode.com/files/MbUnit-2.4.197.exe

Highlights

  • .NET 1.0 support dropped.

  • .NET 1.1 support in 2.4 merged into the main line (No need for MbUnit.Framework.1.1.dll)

  • Added greater support for .NET 2.0 including (MbUnit.Framework.2.0.dll)


    • Database rollback (now no longer need COM+ if your using .NET 2.0).

    • Private method testing (see Vadims articles here and here).

    • Generics in certain Asserts.

  • Support for NUnit style explicit attributes.

As well as a great deal of bug fixes and functional improvements.


The road ahead.


2.4 signals the end of major releases for 2.*, interim releases with tweaked functionality and bug fixes will still occur to 2.4 (starting with 2.4.1) but the next major release of MbUnit will be v3 codenamed MbUnit Gallio. In the coming weeks the core development team will be stepping up through the gears on MbUnit Gallio.