Find XSS the easy way! Dalfox - Hacker Tools

👨‍💻🛠️​ In this week's episode of Hacker Tools, we will take a look at Dalfox.

00:00 Introduction
00:15 Automating XSS
00:40 What is Dalfox?
02:10 Running Dalfox
04:45 What else can it do?
06:40 Outro

---

[vgvezfe]

This is the best xs software i have ever seen

I really feel great!

[tomjohnes]

This is definitely fire. But how to we hide its signature ? I see Dalfox populated on my testing machine logs. Not stealthy

[william_ade]

What bistro of Linux are u using (love it) ?

[tbjehad]

why i didn't get the ditails over view step by step after scan. it just says issue 6 thats it .but didn't said me the vulnerability, the step and payload the tool user for to find this . but in this video you shows us its tell all the step

[itsmdud]

can you suggest some other tools like this?

[malikimranawan]

Can it work in finding real bug ?
Bcz finding Bugs manually is much difficult ...

[CameronNoakes]

I can't run the tool how do you run it I get dalfox not a command

[Dhruv-tedy]

in video you say file containing all your endpoints means all URLs with parameters am i right? (time stamp 04:50)

[techfunky]

Bruh how to run the assetfinder command

[mukto]

Does it also work with xss in input forms? Like comment

[learnfirst-]

it dosen't found xss hard challanges ...🤣🤣 specially html encoding or other escape function

[AkashPatel-zdwf]

one of the worst tool i ever encounter in bug bounty

[writecode]

Nice one... Thanks for sharing (rahulsl)

[Free.Education]

What to do after getting <script> alert(XSS);</script> pop-up because pop-up with cookies 🍪 or <script> document.domain(); </script> pop-up is not suitable to receive bug bounty rewards. Please guide how to escalate reflected XSS to higher levels to earn bounties on hackerOne BugCrowd intigrity etc. Thanks 😊 🤝❤️💫💐😘🥰🌺💥💯👍

[jishan]

I scan testvul.php site with gau which gave me 2800 urls then scan all those with kxss which gave me 19 vulnerable urls which I gave them to dalfox but it did not find anything. I checked manualy and they were all vunerable. Why this happend. Is this tool realy helpfull.?