CVE-2019-10008

This exploit demonstrates a privilege escalation vulnerability in ManageEngine ServiceDesk Plus versions below 10.0 by manipulating session cookies to bypass authentication and escalate privileges to an administrator account.

This repository contains a functional exploit for CVE-2019-10008, which allows privilege escalation in ManageEngine Service Desk Plus by manipulating session cookies. The exploit demonstrates how an attacker with low-privilege credentials can hijack a session to authenticate as a higher-privilege user without a password.