Tutorial: Authenticated Scanning

Basic Auth

hunterx scan http://example.com/admin \
  --auth basic --username admin --password s3cret

Bearer Token

hunterx scan http://example.com/api \
  --auth bearer --token eyJhbGciOiJIUzI1NiIs...

Create cookies.json:

{
  "cookies": [
    {"name": "session", "value": "abc123", "domain": "example.com"}
  ]
}

hunterx scan http://example.com --cookie-file cookies.json

Form Login

HunterX can programmatically log in via HTML forms:

hunterx scan http://example.com \
  --auth form --username user --password pass

For custom form fields, use the YAML config:

auth:
  method: form
  form:
    url: "http://example.com/login"
    username_field: "email"
    password_field: "passwd"
    username: "user@example.com"
    password: "s3cret"
    extra_fields:
      csrf_token: "token_value"
      remember: "1"