Secure Login - Passing Cookies to Scans

To scan content behind secure login, please follow this procedure:

  1. Open your project and navigate to the Content menu.
  2. Open the Pages list.
  3. Visit the page with the login, if it is listed, and click Preview (you’ll need at least one target language on the project for Preview to be selectable!).

OR

  • Go to the Preview of the front page (the “/”, the first one on the Pages list). It will give you the front page through the proxy.
  • Go to the address bar and type in the URL of the login-protected page.

../../_images/preview_login.pngLogin page through the proxy

  1. Enter your login details.
  2. Open your browser’s DevTools from the Menu (F12 on Windows).
  3. Go to Network and reload the page.

../../_images/network_dev.jpgGetting the cookie

  1. Scroll up to the first item and click on it.
  2. Under headers scroll to the cookie header (among request headers), and copy the entire header.

../../_images/cookie_header.jpgCookie header

  1. Pass it to the Proxy: go back to your project and start a new crawl in the Crawl Wizard. Proceed as usual to step #4 (Fine-tune), then paste the contents of the cookie you just copied to the Session Cookie tab.

../../_images/pass_cookie.pngPassing the cookie to the proxy

  1. configure the rest of the crawl and launch it as usual.