Skip to content
You're viewing an older version of this GitHub Action. Do you want to see the latest version instead?
activity

GitHub Action

XSS Scan with Dalfox

v1.0.1

XSS Scan with Dalfox

activity

XSS Scan with Dalfox

XSS Scanning the web application with the Dalfox

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: XSS Scan with Dalfox

              
  uses: hahwul/action-dalfox@v1.0.1
Learn more about this action in hahwul/action-dalfox

Choose a version

XSS scanning with Dalfox on Github-action

Docker build test Action vaild test

Getting Started

Usage

- name: Dalfox scan
  uses: hahwul/action-dalfox@main
  id: xss-result
  with:
    target: 'https://www.hahwul.com'
    mode: url
    cmd_options: '--follow-redirects'

Output Handling

Send slack/github issue/Submit JIRA, etc.. with found-action option

- name: Dalfox scan
  uses: hahwul/action-dalfox@main
  id: xss-result
  with:
    target: 'https://www.hahwul.com'
    mode: url
    cmd_options: '--found-action "curl -i -k"https://hooks.your.system"'
  - run: echo "XSS result - ${{ steps.xss-result.outputs.result }}"

Sample

Single URL Scanning

xss.yaml

on: [push]

jobs:
  dalfox_scan:
    runs-on: ubuntu-latest
    name: XSS Scanning
    steps:
      - name: Checkout
        uses: actions/checkout@v2
        with:
          ref: master
      - name: Dalfox scan
        uses: hahwul/action-dalfox@main
        id: xss-result
        with:
          target: 'https://xss-game.appspot.com/level1/frame'
          mode: url
          cmd_options: '--follow-redirects'

Multi URL Scanning

xss.yaml

on: [push]

jobs:
  dalfox_scan:
    runs-on: ubuntu-latest
    name: XSS Scanning
    steps:
      - name: Checkout
        uses: actions/checkout@v2
        with:
          ref: master
      - name: Dalfox scan
        uses: hahwul/action-dalfox@main
        id: xss-result
        with:
          target: 'https://xss-game.appspot.com/level1/frame\nhttps://www.hahwul.com?q=1234'
          mode: pipe