Hi Team, I am unable to schedule authenticated scans using Arachni and didn't find any useful resources. I came to know that we can't schedule authenticated scans via 'webui'. So tried to run the scan using autologin plugin and other method using --http-authentication-username but still not working.

Suppose say that i need to scan the application "http://10.15.16.1/index" which has username as "user12" and password as "password123" and post authentication page as "http://10.15.16.1/user/profiles" then i will run the scan using below command.

./arachni --http-authentication-username user12 --http-authenication-password password123 --session-check-url http://10.15.16.1/user/profiles --session-check-pattern http://10.15.16.1/user/profiles http://10.15.16.1/index

After running the above command, scan is running but it's not crawling or auditing the post authentication pages. Used the verbose and debug commands as well but not of much use.

Could you please tell me the exact command to run authenticated scans?

Thank you,
Imran