the option "-H" or "--header" how to add multiple header on one dalfox command

[zyjwork]

Question

Your questions
Hi all ,maybe this is a easy question:
it is the option "-H" or "--header" how to add multiple header on one dalfox command ?

I had try to double -H or --header like below :
./dalfox url https://google.com -H "Sec-Fetch-Site: abcdef" -H "Authorization: token" --skip-bav

but alway the last one is valid.

so how to add mutiple header ?

Environment

• Dalfox Version: v2.4.5
• Installed from: (e.g go-get/snapcraft/homebrew) docker

[hahwul]

Hi @zyjwork
Sorry for the late reply.

It’s a bit strange that only the last one works. When I test it the same way, both of the intended headers are sent as shown below and in the image:

dalfox url https://google.com -H "Sec-Fetch-Site: abcdef" -H "Authorization: token" --proxy=http://localhost:8070

Even when I try it with a different URL, they’re still sent correctly. Could I ask you to test it with the latest version, v2.9.3 (latest) or main, if possible?

dalfox url https://xss-game.appspot.com/level1/frame -H "Hi: 1234" -H "B: aaa" --proxy=http://localhost:8070

Images

• latest: https://github.com/hahwul/dalfox/pkgs/container/dalfox/267682028?tag=latest
• main: https://github.com/hahwul/dalfox/pkgs/container/dalfox/367161422?tag=main
• v2.9.3: https://github.com/hahwul/dalfox/pkgs/container/dalfox/267701445?tag=v2.9.3