ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.
β4,884Mar 22, 2026Updated last week
Alternatives and similar repositories for dalfox
Users that are interested in dalfox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probingβ3,025Mar 7, 2026Updated 3 weeks ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β4,860Mar 20, 2026Updated last week
- HTTP parameter discovery suite.β6,154Feb 20, 2025Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,412Sep 13, 2024Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,364May 1, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- declutters url lists for crawling/pentestingβ1,539Feb 23, 2025Updated last year
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,371Mar 20, 2026Updated last week
- Gospider - Fast web spider written in Goβ2,898Apr 21, 2024Updated last year
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,007Dec 21, 2024Updated last year
- Hidden parameters discovery suiteβ2,038Sep 8, 2024Updated last year
- A tool to check a bunch of URLs that contain reflecting params.β598Aug 4, 2024Updated last year
- httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.β9,730Updated this week
- A wrapper around grep, to help you grep for thingsβ2,090Jun 8, 2024Updated last year
- A python script that finds endpoints in JavaScript filesβ4,309Apr 13, 2024Updated last year
- Proton VPN Special Offer - Get 70% off β’ AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attβ¦β5,837Updated this week
- Accept URLs on stdin, replace all query string values with a user-supplied valueβ869Nov 23, 2022Updated 3 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,124Aug 14, 2024Updated last year
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flawsβ3,959Oct 4, 2025Updated 5 months ago
- Fast passive subdomain enumeration tool.β13,283Mar 20, 2026Updated last week
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,574Mar 8, 2026Updated 3 weeks ago
- Fast web fuzzer written in Goβ15,793Apr 24, 2025Updated 11 months ago
- The Swiss Army knife for automated Web Application Testingβ2,321May 8, 2024Updated last year
- Most advanced XSS scanner.β14,831Apr 26, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean β’ AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript filesβ2,407May 26, 2024Updated last year
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enablβ¦β27,587Updated this week
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Eβ¦β8,522Mar 21, 2026Updated last week
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokensβ¦β5,254Mar 13, 2026Updated 2 weeks ago
- Find domains and subdomains related to a given domainβ3,547Jun 7, 2024Updated last year
- Contextual Content Discovery Toolβ3,128Apr 29, 2024Updated last year
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secretsβ1,533Mar 8, 2026Updated 3 weeks ago
- Rockyou for web fuzzingβ3,099Mar 11, 2026Updated 2 weeks ago
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, fβ¦β4,363Sep 30, 2024Updated last year
- Virtual machines for every use case on DigitalOcean β’ AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entβ¦β2,146Feb 23, 2026Updated last month
- Subdomain takeover vulnerability checkerβ1,531Sep 10, 2024Updated last year
- In-depth attack surface mapping and asset discoveryβ14,282Mar 21, 2026Updated last week
- A tool for adding new lines to files, skipping duplicatesβ1,620Jan 12, 2024Updated 2 years ago
- A collection of awesome one-liner scripts especially for bug bounty tips.β3,088Jul 29, 2024Updated last year
- Community curated list of templates for the nuclei engine to find security vulnerabilities.β12,088Updated this week
- A collection of hacks and one-off scriptsβ2,427Mar 13, 2025Updated last year