Back Feeds.4Sysops

Microsoft open

Feeds.4Sysops •IT News • July 20, 2026

Microsoft has released Dusseldorf as a free open-source out-of-band application security testing platform. OAST tools detect flaws such as server-side request forgery, cross-site scripting, server-side template injection, and XML external entity issues that only appear when an application contacts external systems. The project name derives from the city Düsseldorf because its letters spell SSRF, with the umlaut dropped for simplicity. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Launches Dusseldorf Open-Source OAST Platform for Vulnerability Detection Microsoft has released Dusseldorf, an open-source out-of-band application security testing platform. This tool is designed to identify vulnerabilities that occur when applications interact with external systems, such as server-side request forgery and cross-site scripting. Dusseldorf captures inbound network traffic across multiple protocols and allows operators to automate validation workflows. The project name is derived from Düsseldorf, with the acronym SSRF representing server-side request forgery. This initiative aims to provide researchers with the necessary infrastructure to test for out-of-band vulnerabilities in a private environment. The tool is available for free, enhancing the security capabilities of organizations that may lack resources for custom setups. Dusseldorf is expected to improve detection rates of critical vulnerabilities that can be exploited during attacks. 2 sources 28

Extracted Entities

Microsoft open

The full story

Extracted Entities

Attack Types (3)

CWE Weaknesses (4)

MITRE ATT&CK (1)

Platforms (1)