Scheduling Authenticated scans using Arachni

imran shaik's Avatar

imran shaik

20 Aug, 2018 02:36 PM

Hi Team, I am unable to schedule authenticated scans using Arachni and didn't find any useful resources. I came to know that we can't schedule authenticated scans via 'webui'. So tried to run the scan using autologin plugin and other method using --http-authentication-username but still not working.

Suppose say that i need to scan the application "" which has username as "user12" and password as "password123" and post authentication page as "" then i will run the scan using below command.

./arachni --http-authentication-username user12 --http-authenication-password password123 --session-check-url --session-check-pattern

After running the above command, scan is running but it's not crawling or auditing the post authentication pages. Used the verbose and debug commands as well but not of much use.

Could you please tell me the exact command to run authenticated scans?

Thank you,

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:


Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts


? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac