DALFOX

DALFOX is an open-source security scanner focused on automated detection and verification of cross-site scripting vulnerabilities. Version 3 is implemented in Rust, while the earlier Go-based generation remains preserved on a separate branch. The tool can analyze URLs, files, piped input, and raw HTTP requests while examining parameters and possible injection points. Its engine covers reflected, stored, and DOM-based XSS together with static analysis and parameter discovery. WAF fingerprinting helps identify defensive filtering behavior, while multiple output formats support reporting and automation. Dalfox can also operate through a server mode, REST integrations, and an MCP interface. It is intended for authorized application-security testing, bug bounty work, and defensive vulnerability assessment.