dalfox
Fast, powerful XSS scanner and parameter analyzer. Verifies reflections and builds working payloads.
Tags: xss, scanner, go, fast
- Category
- inject
- Maintenance signal
- active
Project repository · Documentation
Use this when: XSS. Use this after you know where input is reflected. A match is not the report.
Install
go
go install github.com/hahwul/dalfox/v2@latestbrew
brew install dalfoxCommand templates
Scan URL list
dalfox file {input} -o {output}Pipe from gf
cat {input} | gf xss | qsreplace 'FUZZ' | dalfox pipe