It doesn't work for wss. I get the message "Firefox can't establish a connection to the server at wss://xx.xxx.xxxxx/tel." I tried other browsers as well. OWASP ZAP proxy works fine. Why am I trying to use Arachni then? Because everything is so much better, if only I could log in. I tried the auto login as well. How can I validate a JSON response? Everytime I try it says the check was not found. It seems I can only validate html fields like anchor and stuff, but the problem is all the static files can be accessed even if not authenticated lol(I know that has to be fixed). I just need to check for one of the values of the JSON response when it logs in...how do I do that? I mean there's a POST request with login and password...the response is a JSON. If I put on the check field for example "field:value" it doesn't work...again OWASP ZAP works fine for this...I can crawl the app just fine. But I want to make arachni work because it has a much better UI, generates reports, can schedule and all that. Very user friendly and configurable. It's such a pitty that I can't make it work..