Getting Started

Welcome Installation Update DalFox Usage and Modes Scanning Single URL Scanning Multiple URL

Advance Guides

Output Handling Use config file BAV Scanning From Raw Request Parameter Mining Custom payload and Custom alert Remote payloads In the Code In the Github Action

Modes

URL Mode Pipeline Mode File Mode Stored XSS Mode Server Mode (REST API) Payload Mode

Format and Spec

Format Of PoC Injectable point Result JSON Format Global Flags

Tips of Dalfox

OneLiner Integration with found-action For CI/CD Pipeline

File Mode

file mode is a mode for scanning multiple URLs or for scanning based on a raw request file in Burp Suite/ZAP. Input is filename.

▶ dalfox file {filename}

If the file is a list of URLs, proceed to scan multiple URLs just like the Pipe, and if it is with the --rawdata option, recognize it as a raw request, analyze the file, and test it.

scanning urls from file

▶ dalfox file urls.txt

scanning from burp/zap raw request file

▶ dalfox file req.raw --rawdata

Improve this page