First register account in that website
the login with that username:pass and catch the login by brupsuit and intercept it
we can see that it users cookie ---[redacted] < answer 1 >
encode cookie value
they use same cookie for everytime login it is not changing so we can exploit that
log out and create another account with different username and intercepted
encode cookie value has a fixed part < answer 2 >
make another decoded cookie value with name [mcinventory + the fixed part]
and catch the request and intercept the response
change the cookie value
login mcinventory account < answer 3 >