Dalfox
Dalfox has an llms.txt. Do you?
Dalfox is your go-to open-source tool for swiftly hunting down XSS vulnerabilities! With its robust command-line interface and automation features, it empowers security pros to streamline their testing processes while keeping the web safe from threats.
Not sure yours is this good? Check it →
Dalfox's llms.txt Insights
Short and sweet
3 sections. Minimalist, but hey — at least they showed up.
Goldilocks zone
55 lines — not too long, not too short. AI loves this.
Double trouble
Runs both llms.txt and llms-full.txt. Someone takes this seriously.
What's inside Dalfox's llms.txt
Dalfox's llms.txt contains 13 sections:
- Dalfox
- Basic Usage
- Basic command structure
- Scan a single URL
- Use blind XSS with callback URL
- Scan multiple URLs from a file
- Process URLs from pipe
- Start as a REST API server
- Start as a MCP server
- Use with custom payloads
- Output in JSON format
- Docs
- Optional
How does Dalfox's llms.txt compare?
| Dalfox | Directory Avg | Top Performer | |
|---|---|---|---|
| Lines | 55 | 1029 | 163,447 |
| Sections | 3 | 17 | 3207 |
Cool table. Now the real question — where do you land? Find out →
Dalfox's llms.txt preview
First 55 of 55 lines
# Dalfox
> Dalfox is a fast, powerful open-source XSS scanning tool written in Go. It focuses on automation to streamline the process of detecting and verifying cross-site scripting vulnerabilities.
Dalfox (where "Dal" is the Korean word for "moon" and "Fox" stands for "Finder Of XSS") is a comprehensive command-line tool designed for security professionals. It excels at finding XSS vulnerabilities through various modes including URL scanning, file-based inputs, pipeline processing, and REST API server capabilities. The tool offers advanced parameter analysis, DOM mining, and headless browser verification for thorough security testing.
## Basic Usage
```bash
# Basic command structure
dalfox [mode] [target] [flags] # e.g., dalfox url https://example.com --worker=50
# Scan a single URL
dalfox url https://example.com
# Use blind XSS with callback URL
dalfox url https://example.com -b https://your-callback-url.com
# Scan multiple URLs from a file
dalfox file urls.txt
# Process URLs from pipe
cat urls.txt | dalfox pipe
# Start as a REST API server
dalfox server --host 0.0.0.0 --port 8080
# Start as a MCP server
dalfox server --type=mcp
# Use with custom payloads
dalfox url https://example.com --custom-payload payloads.txt
# Output in JSON format
dalfox url https://example.com --format json -o results.json
```
## Docs
- [Installation Guide](https://dalfox.hahwul.com/page/installation/) - Complete instructions for installing Dalfox on various platforms including Homebrew, Snapcraft, Go, and Docker.
- [Quick Start](https://dalfox.hahwul.com/page/overview/) - Introduction to Dalfox with key features and basic usage examples.
- [Usage Guide](https://dalfox.hahwul.com/page/usage/) - Detailed documentation on all available modes, options, and flags for customizing scans.
- [Running Dalfox](https://dalfox.hahwul.com/page/running/) - Specific guides for different scanning scenarios (single URL, multiple URLs, raw requests).
- [Advanced Features](https://dalfox.hahwul.com/advanced/features/) - Documentation on specialized features like remote payloads, custom payloads, and BAV analysis.
- [Configuration](https://dalfox.hahwul.com/advanced/config/) - Information on using configuration files for consistent scanning settings.
## Optional
- [GitHub Repository](https://github.com/hahwul/dalfox) - Source code and issue tracking for the Dalfox project.
- [Community Resources](https://dalfox.hahwul.com/community/resources/) - Articles, videos, and tutorials from the Dalfox community.
- [API Documentation](https://dalfox.hahwul.com/page/modes/server-mode/#api-documentation) - Details on using Dalfox's REST API server mode.
- [MCP Integration](https://dalfox.hahwul.com/page/running/mcp/) - Guide to using Dalfox with AI assistants through Model Context Protocol.
- [GitHub Actions](https://dalfox.hahwul.com/page/running/github-action/) - Instructions for integrating Dalfox into CI/CD workflows.
- [Library Usage](https://dalfox.hahwul.com/page/running/code/) - Documentation on using Dalfox as a Go library in your own projects.
What is llms.txt?
llms.txt is an open standard that helps AI language models understand your website. By placing a structured markdown file at /llms.txt, websites provide AI search engines like ChatGPT, Claude, and Perplexity with a clear map of their content, services, and documentation. Companies like Dalfox use it to ensure AI accurately represents their brand when answering user queries. Read the spec.
Dalfox showed up. Where's yours?
1000+ companies didn't overthink it. 60 seconds. Go.
Check your site →