Broken Authentication Via Cookie Manipulation
Procedure
Step1:Enter your username and click "Login"
Step 2: Click on the "Check Admin Access" button to verify if you have administrative privileges.
Step 3: Since access is denied, let's try manipulating the cookie to gain administrative privileges
click on the settings icon and select "Browser Cookie" to proceed.
Step 4: Use the Encode/Decode tool to experiment with base64 encoding and decoding.
Try copying and pasting the encoded values, then use the toolbar to decode them. Familiarize yourself with the base64 toolbar.
Step 5: Follow these instructions to manipulate the privilege cookie: