hahwul/dalfox

Features

• Web Vulnerability Scanning - Provides an automated scanner for identifying and verifying cross-site scripting vulnerabilities across web targets.
• XSS Vulnerability Scanners - Provides an automated scanner for discovering and verifying reflected, stored, and blind cross-site scripting vulnerabilities across web applications.
• Cross-Site Scripting Tools - Automates the discovery and verification of reflected, stored, and blind cross-site scripting vulnerabilities.
• Parameter Discovery - Identifies injectable parameters through static analysis and parameter mining across URLs or files.
• Vulnerability Scanning - Analyzes web targets to identify cross-site scripting vulnerabilities through automated scanning.
• XSS Vulnerability Tools - Executes XSS attacks using custom payloads and AST-based DOM analysis to trace data flow to sinks.
• Blind XSS Detections - The tool uses a callback server to record when a payload executes in a remote browser.
• HTML Context Analyzers - Analyzes HTML structure and reflection points to dynamically construct payloads tailored to specific injection contexts.
• Injection Point Discoveries - The tool identifies potential reflection points in headers, cookies, and paths using wordlists and DOM mining.
• Parameter Profiling - Conducts static analysis and charset probing to create a detailed attack profile for each target parameter.
• Parameter Reflection Profiling - Determines which special characters are reflected via marker requests before deploying attack payloads.
• Payload Execution Verification - Confirms vulnerability status by parsing the response DOM or using AST-based analysis to trace execution sinks.
• Payload Mutation Pipelines - Transforms injection strings through encoding and filler prepending to evade WAF detection rules.
• Blind - Injects out-of-band templates designed to trigger execution in hidden contexts like administrative dashboards.
• Out-of-Band Testing - Detects blind vulnerabilities by monitoring a remote server for asynchronous network callbacks.
• Web Application Penetration Testing - Identifies security flaws in web targets by probing parameters, bypassing firewalls, and analyzing DOM responses.
• Hidden Parameter Discovery - Uncovers undocumented parameters not present in the URL by analyzing DOM structures and framework patterns.
• Contextual Vulnerability Analysis - Analyzes where reflected values land in the DOM to select the most effective payload family for exploitation.
• Vulnerability Scanners - Automatically discovers and verifies reflected, stored, and blind XSS vulnerabilities in web applications.
• Web Application Security - Analyzes HTTP parameters and DOM structures to identify injection points and bypass web firewalls.
• Stored XSS Tests - Tests for stored XSS by sending payloads to one endpoint and verifying execution on a separate retrieval URL.
• Abstract Syntax Tree Parsing - Parses JavaScript bundles into abstract syntax trees to trace data flow from sources to execution sinks.
• Reflection Probing - Sends marker requests to determine which special characters are reflected, informing the depth of subsequent testing.
• Unified Parameter Extraction - Extracts parameters from URLs, request bodies, headers, and cookies to identify potential injection points.
• Multi-Protocol Tool Exposures - Provides a Model Context Protocol server to expose scanning tools as executable functions for AI agents.
• MCP Protocol Integrations - Implements the Model Context Protocol to expose security scanning tools as executable functions for AI agents.
• Model Context Protocol Servers - Implements a server based on the Model Context Protocol to expose scanning tools to AI agents.
• Asynchronous Scan Management - Runs a long-lived service to queue and track vulnerability scans via a remote API.
• Deep Scanning Strategies - Provides a deep scan capability that continues testing parameters after a successful hit to uncover all possible injection vectors.
• Attack Payloads and Wordlists - Loads external payload lists from local files or remote community wordlists for customized testing.
• Evasion Tooling - Employs inspection window evasion by prepending benign filler to payloads to bypass firewall byte-range limits.
• XSS Payload Generation - Creates injection strings using families such as HTML tags and DOM clobbering to find vulnerabilities.
• Payload Encoders - Replicates encodings like Base64 or JSON for parameters to ensure payloads remain compatible with server expectations.
• Programmatic Scanning APIs - Provides developer interfaces for executing automated security scans and retrieving findings programmatically.
• Remote Scanning APIs - Starts a REST server providing remote endpoints for vulnerability scanning and analysis.
• Security Automation APIs - Provides a REST API for programmatically triggering asynchronous security scans and retrieving findings.
• Scan Configurations - Allows defining scanning preferences, network timeouts, rate limits, and concurrency via structured configuration files.
• Continuous Integration Pipelines - Processes targets via standard input and file batches to integrate into CI and reconnaissance stacks.
• Target URL Filtering - Allows excluding specific parameters, URL patterns, or domains to maintain a strict scanning scope.
• Security and Monitoring Pipelines - Integrates vulnerability scanning into CI pipelines using machine-readable outputs and API controls.
• Dry-Run Modes - Identifies parameters and maps the attack plan without sending active payloads to the target.
• Scan Job Lifecycle Tracking - Tracks and manages asynchronous scan jobs with real-time progress updates and deletion capabilities.
• Agent Job Lifecycle Management - Manages the lifecycle of long-lived vulnerability analysis tasks via a remote API.
• AI-Driven Penetration Testing - Integrates AI agents with security tools via the Model Context Protocol to automate the scan triggering process.
• CSP Bypass Payloads - Parses security headers and generates specific payloads to exploit weaknesses in Content Security Policies.
• HTTP Parameter Pollution - Implements HTTP parameter pollution to bypass filters that only inspect the first occurrence of a parameter.
• Injection Template Markers - Enables precise payload placement within tokens using custom request templates and markers.
• Payload Encoders - Transforms injection strings using multi-level URL encoding to evade security filters.
• Randomized Request Delays - Implements randomized request intervals and cooldown pauses to avoid triggering rate-limit or pattern-based defenses.
• HTTP Request Evasion - Testing the effectiveness of web application firewalls by using payload mutation, encoding, and request timing strategies.
• Scan Volume Estimation - Analyzes targets to discover parameters and estimate request volume before sending active payloads.
• WAF Bypass Techniques - Fingerprints target firewalls and applies encoding and mutation strategies to circumvent WAF filtering rules.
• Scan Contextualization - Injects cookies or custom headers to scan protected or stateful application areas.
• AI Tool Definition Servers - Provides a communication server using standard I/O to define scanning tools for AI agent integration.
• Request Rate Limiting - Caps outbound request rates and restricts concurrent job counts to protect target stability and system memory.
• Server Reachability Checks - Checks if a target is reachable and estimates the number of parameters to be tested.
• RESTful Services - Operates as a long-lived RESTful server that accepts scan requests and manages job statuses.
• Vulnerability Scanners - Powerful XSS scanner and utility.
• Cross-Site Scripting - Automated scanner for XSS flaws and parameter analysis.
• Cross-Site Scripting Tools - Go-based tool for parameter analysis and XSS scanning.
• Specialized Vulnerability Scanners - Parameter analysis and XSS scanning tool for web applications.
• Web Vulnerability Tools - Powerful XSS scanner and parameter analysis tool.
• XSS and Injection Testing - Automated XSS scanner and parameter analysis tool.
• XSS Injection - Go-based XSS scanner and parameter analysis tool.

Star history