dalfox
DalFox is a fast, powerful parameter analysis and XSS scanner, based on a golang/DOM parser.
Details
Category: Vulnerabilities
Publisher: trickest
Created Date: 9/7/2021
Container: quay.io/trickest/dalfox:62d1f2e
Source URL: https://github.com/hahwul/dalfox
Parameters
Command:
sxss - Use Stored XSS modeCommand:
--debug - Debug modeCommand:
--param - Only testing selected parametersCommand:
--cookie - Add custom cookieCommand:
payload - Payload mode, make and enum payloadsCommand:
--worker - Number of worker (default 100)Command:
--no-color - Not use colorizeCommand:
--only-poc - Shows only the PoC code for the specified pattern (g: grep / r: reflected / v: verified)Command:
--skip-bav - Skipping BAV(Basic Another Vulnerability) analysisCommand:
--data - Using POST Method and add Body dataCommand:
--proxy - Send all request to proxy server. Example: http://127.0.0.1:8080Command:
--mining-dom - Find new parameter in DOM (attribute/js value) (default true)Command:
--no-spinner - Not use spinnerCommand:
--output-all - All log write modeCommand:
url - Use single target modeCommand:
--config - Using config from fileCommand:
--deep-domxss - DOM XSS Testing with more payloads on headless [so slow]Command:
--method - Force overriding HTTP Method. Example: PUT (default GET)Command:
--mining-dict - Find new parameter with dictionary attack, default is Gf-Patterns=>XSS (default true)Command:
file - Use file mode(targets list or rawdata)Command:
--timeout - Second of timeout (default 10)Command:
--found-action - If found weak/vuln, action(cmd) to next. Example: './notify.sh'Command:
--header - Add custom headersCommand:
--skip-grepping - Skipping built-in greppingCommand:
--skip-headless - Skipping headless browser base scanning[DOM XSS and inJS verify]Command:
--format - Stdout output format. Supported plain / jsonCommand:
--http - Using force http on rawdata modeCommand:
--only-discovery - Only testing parameter analysisCommand:
--cookie-from-raw - Load cookie from burp raw http request. Example: request.txtCommand:
--custom-payload - Add custom payloads from fileCommand:
--remote-payloads - Using remote payload for XSS testing. Supported: portswigger/payloadbox. Example: portswigger,payloadboxCommand:
--skip-mining-all - Skipping ALL parameter miningCommand:
--skip-mining-dom - Skipping DOM base parameter miningCommand:
--blind - Add your blind xss domain. Example: hahwul.xss.htCommand:
--grep - Using custom grepping file.Example: ./samples/sample_grep.jsonCommand:
--follow-redirects - Following redirectionCommand:
--mining-dict-word - Custom wordlist file for param mining. Example: word.txtCommand:
--remote-wordlists - Using remote wordlists for param mining. Supported: burp/assetnote. Example: burpCommand:
--skip-mining-dict - Skipping Dict base parameter miningCommand:
--custom-alert-type - Change alert value type. Example: none / str,none (default none)Command:
--user-agent - Add custom UserAgentCommand:
--delay - Milliseconds between send to same host (1000==1s)Command:
--rawdata - Using req rawdata from Burp/ZAPCommand:
--skip-xss-scanning - Skipping XSS ScanningCommand:
--trigger - Checking this url after inject sxss code. Example: https://~~/profileCommand:
--custom-alert-value - Change alert value. Example: document.cookie (default 1)Command:
--sequence - Set sequence to first number. Example: https://~/view?no=SEQNC 3 (default -1)Command:
--ignore-return - Ignore scanning from return code. Example: 302,403,404Command:
--silence - Not printing all logsCommand:
--entity-gf - Enumerate a gf-patterns xss paramsCommand:
--enum-attr - Enumerate a in-attr xss payloadsCommand:
--enum-html - Enumerate a in-html xss payloadsCommand:
--enum-injs - Enumerate a in-js xss payloadsCommand:
--make-bulk - Make bulk payloads for stored xssCommand:
--only-custom-payload - Only testing custom payload (required parameter custom-payloads)Command:
--encoder-url - Encoding outputCommand:
--enum-common - Enumerate a common xss payloadsCommand:
--remote-payloadbox - Enumerate a payloadbox's xss payloadsCommand:
--entity-useful-tags - Enumerate a useful tags for xssCommand:
--remote-portswigger - Enumerate a portswigger xss cheatsheet payloadsCommand:
--entity-event-handler - Enumerate a event handlers for xssCommand:
--entity-special-chars - Enumerate a special chars for xss