Use a Web Session Cookie against a Test Application

In an authorized assessment of an intentionally Internet-reachable web application, replay a synthetic session cookie issued to a non-privileged test account against a dedicated HTTPS session-check route. The exercise uses a test cookie jar prepared for that purpose, suppresses the response body, and records only the HTTP status. It does not collect browser cookies or send credentials to an external listener. Internal-only application deployments require internal reachability and are outside this external-access variant.