1 . Obtain a cookie value from registering or signing up for an account. 2. Decode the cookie value. 3. Identify the object notation or structure of the cookie. 4. Change the parameters inside the object to a different parameter with a higher privilege level, such as admin or administrator. 5. Re-encode the cookie and insert the cookie into the value space; this can be done by double-clicking the value box. 6. Action the cookie; this can be done by refreshing the page or logging in.
encoding : hex decode it https://gchq.github.io/