This is a throwaway test page for the WinHTTrack crawler. It is not a real account and it protects nothing. Do not use these credentials anywhere else.
User whtt-tester · password fixture-pw-2026
This form has no action and no method. A script turns the password into a token and
posts that; the server accepts the token and refuses the password itself. A plain
curl or wget post of the password cannot get in.
The transform is the one documented in the source of this page: each byte of the
password XORed with 0x5A, written as two hex digits.
Protected area · Clear the cookie
| Cookie | Received | Value as sent back |
|---|---|---|
whtt_session | no | — |
whtt_persistent | no | — |
whtt_awkward | no | — |
whtt_bare | no | — |
whtt_www | no | — |
whtt_js | no | — |