This is a throwaway test page for the WinHTTrack crawler. It is not a real account and it protects nothing. Do not use these credentials anywhere else.
User whtt-tester · password fixture-pw-2026
Three login fixtures for WinHTTrack's “Log in with a browser…” feature. Each one proves something the other two cannot. Nothing here is a real account, and the credentials are printed in the banner above.
The happy path end to end. Sets three cookies: an HttpOnly session cookie, a
persistent one a year out, and one whose value carries a comma and an equals sign.
Access is gated on the HttpOnly cookie alone. Marker LOGIN-OK basic, plus
three deeper pages for a crawl to follow.
httrack.com/tests/login/crosshost/
The login starts on httrack.com and finishes on
www.httrack.com, leaving a host-only cookie on each. The protected content is
split across both hosts, so harvesting only the starting host's cookies is not enough.
Markers LOGIN-OK crosshost and LOGIN-OK crosshost-www.
The form has no action and no method. A script computes a token from the password and
posts that; the password itself is refused. Marker LOGIN-OK js.
A refused page answers 403 and carries LOGIN-REQUIRED. The
success markers are the five above. README.txt lists every URL
and marker in one place.
| Cookie | Received | Value as sent back |
|---|---|---|
whtt_session | no | — |
whtt_persistent | no | — |
whtt_awkward | no | — |
whtt_bare | no | — |
whtt_www | no | — |
whtt_js | no | — |