Function to obtain an session cookie from the reverse proxy Microsoft ISA.

rp_session_cookie.py

import http.client

def obtains_session_cookie():
    """
    Function to obtain an session cookie from the reverse proxy Microsoft ISA.
    
    :return The value of the "Set-Cookie" response HTTP header.
    """
    # Build and send request
    req_body = "curl=Z2FstoreZ2F&flags=0&forcedownlevel=0&formdir=9&username=LOGIN&password=PASSWORD&SubmitCreds=Ouvrir+une+session"  
    req_headers = {}
    req_headers["User-Agent"] = "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16"
    req_headers["Accept"] = "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
    req_headers["Accept-Language"] = "en-gb,en;q=0.5"
    req_headers["Accept-Encoding"] = "gzip, deflate"	
    req_headers["Content-Type"] = "application/x-www-form-urlencoded"
    http_client = http.client.HTTPSConnection("targetsite.com")
    http_client.request("POST", "/CookieAuth.dll?Logon", req_body.encode("utf-8"), req_headers)
    response = http_client.getresponse()
    http_client.close()
    # Read Cookie header value
    cookies = response.getheader("Set-Cookie")
    return cookies

I have created this code during a pentest in order to automate re-authentication during exploitation of a blind SQL injection.