Packages and Binaries:

dalfox

Powerful open-source XSS scanner and utility focused on automation
Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities.

Installed size: 13.96 MB
How to install: sudo apt install dalfox

dalfox

Powerful open-source XSS scanner

root@kali:~# dalfox -h

               ░█▒
             ████     ▓
           ▓█████  ▓██▓
          ████████████         ░
        ░███████████▓          ▓░
     ░████████████████        ▒██░
    ▓██████████▒███████     ░█████▓░
   ██████████████░ ████        █▓
 ░█████▓          ░████▒       ░         Dalfox v3.2.2
 █████               ▓██░
 ████                  ▓██      Powerful open-source XSS scanner
 ███▓        ▓███████▓▒▓█░     and utility focused on automation.
 ███▒      █████
 ▓███     ██████
 ████     ██████▒
 ░████    ████████▒

Powerful open-source XSS scanner

Usage: dalfox [COMMAND] [TARGET] <FLAGS>
e.g., dalfox scan https://dalfox.hahwul.com

Commands:
  scan        Scan targets for XSS
  server      Run API/server mode
  payload     Manage or enumerate payloads
  mcp         Run MCP stdio server (Model Context Protocol) exposing Dalfox tools
  completion  Generate shell completion scripts
  help        Print this message or the help of the given subcommand(s)

Arguments:
  [TARGET]...  Targets (when no subcommand is provided, defaults to scan)

Options:
      --config <FILE>  Path to a config file (TOML or JSON). Overrides default search path
      --debug          Enable debug logging (show DBG lines)
      --no-color       Disable colored output (also respects NO_COLOR env var)
  -S, --silence        Silence all logs except POC output to STDOUT
  -h, --help           Print help
  -V, --version        Print version