hahwul / dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
https://dalfox.hahwul.com
MIT License
3.68k stars 409 forks source link

Add logging time for detecting blind xss #552

Closed basedygt closed 4 months ago

basedygt commented 5 months ago

Dalfox doesn't logs time for each payload submitted. it's important as sometimes the remote server recieving the outbound connection (used for blind xss detection) doesn't include the site from where it was sent which obviously will result in unable to detect the url or payload that was vulnerable. However if logging time is enabled we can match the time when dalfox sent the request and time when our server received the request and potentially find the vulnerable payload. We can take the example of sqlmap or commix for logging.

Thanks