Secure Login - Passing Cookies to Scans

To scan content behind secure login, please follow this procedure:

  1. Open the Dashboard 2.0 and navigate to the Pages list
  2. Find the page with the login, right-click on it and select Preview (you’ll need at least one target language on the project for Preview to be selectable!).

OR

  1. Go to the Preview of the front page (the “/”, the first one on the Pages list). It will give you the front page through the proxy.

../../_images/preview_login.pngOpen the Preview

  1. Go to the address bar and type in the URL of the login-protected page.
  2. Enter your login details.
  3. Open your browser’s DevTools from the Menu (F12 on Windows).
  4. Go to Network and reload the page.

../../_images/network_dev.jpgGetting the cookie

  1. Scroll up to the first item and click on it.
  2. Under headers scroll to the cookie header (among request headers), and copy the entire header.

../../_images/cookie_header.jpgCookie header

  1. Pass it to the Proxy: go back to your project and start a new crawl in the Crawl Wizard. Proceed as usual to step #4 (Fine-tune), then paste the contents of the cookie you just copied to the Session Cookie tab.

../../_images/pass_cookie.pngPassing the cookie to the proxy

  1. configure the rest of the crawl and launch it as usual.