Thanks for your reply.
But I can't stll make this tool work against our website.
Yes, there's a cookies.txt file generated and it contains 
ASP session ID. But I don't know why this tool keep 
dropping the session satus right after hitting the secured 
homepage.
Anyone has any idea?