dalfox

Cross-site Scripting scanner

Automates the process of identifying vulnerabilities in web applications by scanning for cross-site scripting (XSS) flaws and analyzing parameters.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

GitHub

4k stars
55 watching
421 forks
Language: Go
last commit: 7 days ago
Linked from 1 awesome list

bugbountybugbounty-toolcicd-pipelinedevsecopsgolanghacktoberfestsecurityvulnerabilityxssxss-bruteforcexss-detectionxss-exploitxss-scanner

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
hahwul/xspear Automated testing tool for identifying vulnerabilities in web applications via cross-site scripting (XSS) attacks 1,201
s0md3v/xsstrike Automated tool to scan and detect Cross Site Scripting vulnerabilities in web applications 13,378
jiangsir404/xss-sql-fuzz Automates fuzzing of XSS and SQL injection vulnerabilities in web applications using Burp Suite extensions. 60
leizongmin/js-xss Sanitizes untrusted HTML to prevent cross-site scripting attacks by filtering input based on a whitelist of allowed tags and attributes. 5,219
asaiken/dom-based-xss-finder Tools for identifying and exploiting vulnerabilities in DOM-based cross-site scripting attacks. 70
epsylon/xsser Automated tool to detect and exploit Cross Site Scripting (XSS) vulnerabilities in web applications 1,204
r0075h3ll/oralyzer A tool to identify vulnerabilities in web applications by probing for Open Redirections and other types of attacks. 753
attackercan/burp-xss-sql-plugin Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications. 44
v8blink/chromium-based-xss-taint-tracking An XSS detection tool for web browsers with taint-tracking capabilities 113
laruence/taint A PHP extension that detects and warns about potential cross-site scripting (XSS) vulnerabilities in user input 611
jewel591/xssmap A tool to detect cross-site scripting vulnerabilities in web applications 260
ssl/ezxss A tool for testing and exploiting Cross Site Scripting vulnerabilities in web applications 1,906
zaproxy/zaproxy Automatically finds security vulnerabilities in web applications during development and testing. 12,743
vavkamil/xsswagger A tool to scan web applications for Swagger UI vulnerabilities 55
damian89/extended-xss-search A tool for scanning and identifying cross-site scripting (XSS) vulnerabilities in web applications 182