Nessus Importing cookies for Web application security scanning

When you do not import cookies using Nessus to scan, the results of the scan is relatively simple, many deep problems can not be scanned out.

We need to manually import cookies, the results of a status scan with cookies will be more detailed and deeper, the following is the procedure:

In the Website login state, enter Document.cookie in the browser address bar to move the cursor to the beginning of the line manually enter javascript:
The full format is as follows:

1	javascript:document.cookie

You can view the cookie information after carriage return, such as:

Access http://www.crdx.org/misc/cookies for cookie format conversions, such as:

Enter the destination address domain name, paste the information you just copied into the input column, and click Generate to generate the cookie information in the standard format.

Save the generated cookie information to a text file and save it as an arbitrary file name.

In the authentication method item in the Nessus Scan configuration, select HTTP Cookies Import, click the Add file below and import the text file you just saved.

At this point the scan is with the cookie state.

Nessus Importing cookies for Web application security scanning