workflowstacks
automation

Dalfox: Automate XSS Scanning

Detect XSS vulnerabilities with Dalfox, a security tool for founders. 5.1k+ GitHub stars

From the repo · “🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.”

intermediate⏱ 30 minutes💵 Free
5,328 stars+1★ this week568 forksRustGuide quality 8/10 · reviewed Jul 2Updated 10/19/2026100% free · open source
What it is

Detect XSS vulnerabilities automatically with a click.

Real use case example

"A founder named Rachel uses Dalfox to scan her web app for XSS vulnerabilities. She clicks 'Scan', and Dalfox identifies a weakness. Rachel fixes the issue before hackers exploit it, thanks to Dalfox's automated security checks."

Best insideSelf-hostedAny AI Client
When to use it
  • •When testing web application security for potential XSS vulnerabilities
  • •When automating security audits for compliance or regulatory requirements
  • •When verifying the effectiveness of XSS protection measures in place
Ready-to-paste prompt
dalfox --url https://example.com --blind --output results.txt
Heads up: Dalfox requires Rust and Cargo to be installed on the system, and may not work as expected on systems with outdated or unsupported Rust versions
Saves to your device
Use with Claude
New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install
Claude Code
mkdir -p ~/.claude/skills/dalfox && curl -fsSL https://workflowstacks.com/api/skills/dalfox/claude-skill -o ~/.claude/skills/dalfox/SKILL.md
Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)
claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How Dalfox: Automate XSS Scanning works
Codeflow
Free to inspect

Dalfox: Automate XSS Scanning is a very large Rust project (~123k lines across 208 code files, plus 38 test files). Setup is light: installs like a normal app. Reading the code is optional. Last commit this month, MIT license, has a test suite.

Size
Very large codebase
~123k lines · 208 code files · days to read — use, don't read
Setup
One-command install
Installs like a normal app. Reading the code is optional.
Runs on
Rust · Docker
No API keys detected
Rust 94%Crystal 6%
Where to start reading
  1. 1
    README.md
    Start here — what it does and how to install it
  2. 2
    AGENTS.md
    The instructions the AI actually follows
  3. 3
    src/main.rs
    Where the program starts running
  4. 4
    Cargo.toml
    Dependencies and the commands it exposes
  5. 5
    examples/config.toml
    A worked example — copy this to get going
What's in each folder
src/Core code — the actual logic206 files
skills/Prompts, skills & agent definitions8 files
docs/Documentation120 files
examples/Examples you can copy3 files
scripts/Helper scripts44 files
aur/Folder1 files
snap/Folder1 files
tests/Tests — proof it works110 files
READMEHas testsDocumentedCI checksDocker readyExamples includedMIT licenseUpdated this month
Quick Actions
Details
Creator
hahwul
Language
Rust
Category
automation
Published
4/12/2020

Are you the creator of this tool? and earn 85% of every sale.

Show it off in your README:

Featured on WorkflowStacks
[![Featured on WorkflowStacks](https://workflowstacks.com/api/badge/dalfox.svg)](https://workflowstacks.com/skills/dalfox?utm_source=github&utm_medium=badge)
🔥 Hot this week, in your inbox
Skills like this, every Monday.

The five fastest-growing open-source AI skills, ranked by GitHub star growth. One email a week, unsubscribe anytime.

Related skills

More automation tools founders pair with this one.

automation★ 208,301
n8n: Scale Your Startup with 207k+ GitHub-Star Automation
n8n lets founders automate workflows across 400+ services, blending visual no‑code design with custom TypeScript code—self‑hosted or cloud.
automation★ 155,897
Langflow: Rapidly Build AI Agents & Workflows
Create and launch AI‑powered agents and multi‑step workflows without deep ML code—ideal for founders scaling generative‑AI products. 155k+ GitHub stars
automation★ 133,982
MoneyPrinterTurbo: AI Video Automation
Generate short videos with one click using AI. For founders needing automation.
automation★ 58
ErisPulse: Automate across 10+ platforms
Get a multi-platform bot framework for automation. For founders needing cross-platform chatbot solutions.
automation★ 13,507
puck – Drag‑and‑Drop Visual Editor for Faster React UIs
Build React pages without code using puck’s drag‑and‑drop canvas. Ideal for founders who need quick, visual UI prototyping. 13k+ GitHub stars.
automation★ 56
launchpad-lalapalooza
LaLa Trainers Launcher 2026: Smart Workout Automation Hub