Dusseldorf

Self-hosted out-of-band application security testing platform from Microsoft that deploys DNS, HTTP and HTTPS listeners on a domain you control and captures any inbound request to it. It is used to detect and validate blind, out-of-band vulnerabilities such as SSRF, XSS, SSTI and XXE, with a REST API and GUI for inspecting captured interactions and crafting custom responses and filters.