security enabled community high v1.0.0

dalfox

Fast parameter analysis and XSS scanner written in Go with WAF detection, mining, and multi-format output.

📋 Live Preview

dalfox url {target}

🌍 target → url

dalfox url {target}

Sandbox: execFile · Timeout: 600s

Capabilities

web.injection.xss

web.analysis.parameter

security.evasion.waf

web.scan.mass

Parameters

Name	Type	Required	Default	Description	Aliases
`url`	string	Yes	-	Target URL (positional argument)
`cookie`	string	No	-	Cookie string (--cookie)	`--cookie`
`header`	string	No	-	Custom HTTP headers (--header)	`--header`
`data`	string	No	-	POST data (--data)	`--data`
`user-agent`	string	No	-	Custom User-Agent (--user-agent)	`--user-agent`
`proxy`	string	No	-	Proxy URL (--proxy)	`--proxy`
`output`	string	No	-	Output file (--output)	`--output`
`format`	string	No	plain	Output format (json, xml, plain) (--format)	`--format`
`silent`	boolean	No	-	Silent mode (--silent)	`--silent`
`worker`	integer	No	10	Number of worker threads (-w)	`-w`
`mass`	boolean	No	-	Mass scan mode (--mass)	`--mass`
`timeout`	integer	No	10	Request timeout in seconds (--timeout)	`--timeout`
`delay`	integer	No	0	Delay between requests in ms (--delay)	`--delay`
`blind`	boolean	No	-	Blind XSS detection (--blind)	`--blind`
`mining`	boolean	No	-	Enable mining mode (--mining)	`--mining`
`custom_payload`	boolean	No	-	string Custom payload file	`--custom-payload`
`follow_redirects`	boolean	No	-	Follow redirects	`--follow-redirects`
`found_action`	boolean	No	-	string Command to run on XSS found	`--found-action`
`h`	boolean	No	-	Help for dalfox	`-h`, `--help`
`mass_file`	boolean	No	-	string File for mass targets	`--mass-file`
`not_found_action`	boolean	No	-	string Command on not found	`--not-found-action`
`only_custom_payload`	boolean	No	-	Use only custom payloads	`--only-custom-payload`
`waf_evasion`	boolean	No	-	Enable WAF evasion	`--waf-evasion`

Artifacts

Type	Description	MIME	Schema	Trust
`web.xss.report`	XSS scan results	text/plain	-	verified

Contract

Inputs

web.target.url

Target URL to scan for XSS

Outputs

web.injection.xss.results

XSS vulnerability findings

Side effects: network_traffic

Workflow Edges

Produces

web.injection.xss.results

Consumes

web.target.url

Resource Profile

Resource	Value
CPU	medium
Memory	64 MB
Network	medium
Disk I/O	low

Examples

Basic XSS scan

dalfox url http://target.com/page.php?q=test

Scan with POST data

dalfox url http://target.com/login --data "user=admin&pass=test"

Mass scan from file

dalfox pipe < urls.txt

Scan with WAF evasion

dalfox url http://target.com/page.php?q=test --waf-evasion

Output in JSON format

dalfox url http://target.com/page.php?q=test --format json --output results.json

Documentation

Dalfox — Fast XSS Scanner

Dalfox is a fast, parameter-analysis-based XSS scanner written in Go with WAF detection, mining capabilities, and multiple output format support.

Basic Usage

# Single URL scan
dalfox url http://target.com/page.php?id=1

# With POST data
dalfox url http://target.com/login --data "user=test&pass=test"

# With custom headers
dalfox url http://target.com/page.php?id=1 --header "Authorization: Bearer token"

Mass Scanning

# Pipe URLs from file
cat urls.txt | dalfox pipe

# Mass scan mode
dalfox url http://target.com/page.php?id=1 --mass

Advanced Options

# Mining mode (find parameters)
dalfox url http://target.com/page.php?id=1 --mining

# WAF evasion
dalfox url http://target.com/page.php?id=1 --waf-evasion

# Blind XSS
dalfox url http://target.com/page.php?id=1 --blind

# JSON output
dalfox url http://target.com/page.php?id=1 --format json -o results.json

Related Tools

xsstrikecommix

References

Dalfox GitHub