DALFOX

DALFOX is an open-source security scanner focused on automated detection and verification of cross-site scripting vulnerabilities. Version 3 is implemented in Rust, while the earlier Go-based generation remains preserved on a separate branch. The tool can analyze URLs, files, piped input, and raw HTTP requests while examining parameters and possible injection points. Its engine covers reflected, stored, and DOM-based XSS together with static analysis and parameter discovery. WAF fingerprinting helps identify defensive filtering behavior, while multiple output formats support reporting and automation. Dalfox can also operate through a server mode, REST integrations, and an MCP interface. It is intended for authorized application-security testing, bug bounty work, and defensive vulnerability assessment.

Features

Reflected, stored, and DOM XSS detection
Parameter discovery and static analysis
WAF fingerprinting and analysis
URL, file, pipe, and raw HTTP input
JSON, Markdown, SARIF, and other reports
REST, server, and MCP integration

Project Samples

Project Activity

See All Activity >

License

MIT License

Follow DALFOX

DALFOX Web Site

Other Useful Business Software

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Rate This Project

User Reviews

Be the first to post a review of DALFOX!

Additional Project Details

Operating Systems

Linux, Mac

Programming Language

Rust

Related Categories

Rust Software Testing Tool

Registered

14 hours ago

Similar Business Software

Parasoft

"Parasoft delivers an AI‑powered software testing platform that helps organizations continuously release high‑quality software. Our solutions support embedded and enterprise teams by integrating code analysis, testing, virtualization, and coverage into the delivery pipeline to improve security,...

See Software
MuukTest

Are bugs slipping through your QA process and frustrating your customers? Catching issues early shouldn’t mean overwhelming your team with time-consuming tests. With MuukTest’s AI-driven platform, growing engineering teams reach 95% end-to-end test coverage in just 3 months, delivering quality...

See Software
Checksum.ai

Checksum is a continuous quality platform that autonomously generates, runs, and maintains tests so engineering teams can ship AI-generated code without trading speed for reliability. Unlike copilots that wait for prompts, Checksum works as a background agent, detecting what needs testing,...

See Software
Virtuoso QA

Virtuoso QA is an AI-powered test automation platform designed to accelerate software quality assurance for enterprises. It enables teams to create, execute, and maintain tests using natural language without requiring coding expertise. The platform uses self-healing AI to automatically fix...

See Software
Testim

Testim is the fastest path to resilient end-to-end tests—codeless, coded or both. Testim lets you create amazingly stable codeless tests that leverage our AI, but also the flexibility to export tests as code. You can leverage Testim’s modern JavaScript API and your IDE to debug, customize or...

See Software
QA Wolf

QA Wolf is the fastest path to deterministic end-to-end test coverage for web and mobile apps. In one platform, teams can manage the entire testing lifecycle: Map out your workflows and coverage gaps, automate your tests in Playwright or Appium, and run your suite fully in parallel. - Build...

See Software