Microsoft releases Dusseldorf, an open-source out-of-band security testing platform

Microsoft has introduced Dusseldorf, an open-source platform for out-of-band application security testing. The tool captures inbound network traffic across multiple protocols and supports automated responses, helping testers validate whether applications are making unexpected external calls during attacks. Out-of-band testing is especially useful for detecting issues that do not immediately show up in normal request/response flows. The release gives security teams a more controlled way to build infrastructure that many researchers previously had to assemble manually. It is relevant for red teams, appsec engineers, and bug hunters who need to observe callbacks and other hidden behaviors. As an open-source project, it could lower the barrier to entry for more systematic OAST testing.

Source: Help Net Security