Dalfox

dalfox url <url> -b <collaborator>

Parametric and context-based XSS fuzzing tool with OOB (out-of-band) support.

When you need a fast and efficient XSS scanner, especially for hunting blind XSS using a collaborator (Interactsh, Burp Collaborator). Dalfox generates payloads based on context and can verify vulnerabilities via external callbacks, making it more reliable than alert-only scanners.

If the target is highly static with no parameters, or if the WAF blocks quickly, it may be ineffective. Also, without a configured collaborator, it loses some of its power.