2025-03-14 21:59:59 -06:00
|
|
|
# dalfox
|
|
|
|
|
|
|
|
|
|
> A powerful open-source XSS scanner focused on automation.
|
2025-12-16 10:20:31 -07:00
|
|
|
> More information: <https://dalfox.hahwul.com/page/usage/>.
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Scan a single URL for XSS vulnerabilities:
|
|
|
|
|
|
2025-12-16 10:20:31 -07:00
|
|
|
`dalfox url {{https://example.com}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Scan a URL using a header for authentication:
|
|
|
|
|
|
2025-12-16 10:20:31 -07:00
|
|
|
`dalfox url {{https://example.com}} {{[-H|--header]}} '{{X-My-Header: 123}}'`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Scan a list of URLs from a file:
|
|
|
|
|
|
|
|
|
|
`dalfox file {{path/to/file}}`
|
2025-12-16 10:20:31 -07:00
|
|
|
|
|
|
|
|
- Start Dalfox as a REST API server:
|
|
|
|
|
|
|
|
|
|
`dalfox server --host {{0.0.0.0}} --port {{8080}}`
|
