_ ReconLab
Commands  / Web Application  / Dalfox

Dalfox

Fast parameter-analysis XSS scanner.

KaliParrothigh

pkg: dalfox

Dalfox discovers reflected/DOM XSS by analysing parameters and verifying payloads, optimised for automation.

Syntax

dalfox url {url}

Example

dalfox url "https://example.com/search?q=test"

Analyses the q parameter and attempts to confirm XSS payloads.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

urlSingle-URL scan mode (dalfox url <URL>).
pipeRead targets from stdin.
-b <https://xss.ht>Blind-XSS callback URL.
--custom-payload <payloads.txt>File of custom payloads.
--mining-domMine parameters from the DOM.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

dalfox

Usage examples

dalfox url "https://t/?q=1"

Scan a parameter for XSS.

cat urls.txt | dalfox pipe -b https://xss.ht

Mass-scan with a blind-XSS callback.

Advantages
  • Fast, automation-friendly XSS testing
  • Smart payload verification
  • Pipe-friendly with other tools
Disadvantages
  • Active payload injection
  • Misses complex/stored XSS flows
  • Authorization required
Tags
#xss#web

Official docs: Dalfox ↗

Related commands

sqlmap

Automatic SQL injection detection & exploitation.

XSSer

Automated framework to detect & exploit XSS.

Frequently asked questions

What is Dalfox used for?
Dalfox discovers reflected/DOM XSS by analysing parameters and verifying payloads, optimised for automation.
What is an example Dalfox command?
A common example is: dalfox url "https://example.com/search?q=test" — Analyses the q parameter and attempts to confirm XSS payloads.
Is Dalfox part of Kali Linux?
Yes. Dalfox ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dalfox.
What category of security tool is Dalfox?
Dalfox is a Web Application tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →