I needed to scan a Joomla site that only shows most of its content when logged in in the frontend. Xenu FAQ suggests using Cookies. That didn’t work for me. So I used Fiddler web debugger and it’s scripting engine.
First start Fiddler and set it to capture traffic. Log in in the site using a browser. Check and find the cookie data – copy it to the clipboard.
Open ‘Customize rules’ in Fiddler and search for
static function OnBeforeRequest(oSession: Session)
Before any other code paste:
oSession.oRequest["Cookie"] = "data you copied earlier";
Now start Xenu as you would on any other site. Remember to disable Fiddler after that as it might offer weird results later.