pimps/CVE-2017-1000486 ? reverse-engineered prompt

Build me a small Python command line tool that demonstrates and tests the PrimeFaces CVE 2017 1000486 issue against a local lab target.

I want it to accept a target URL, let me run a default command like whoami, and also let me pass a custom command, a cookie, a proxy, and the path to the vulnerable dynamic content endpoint. It should be able to generate the encrypted payload, send it to the target, and print the command output clearly. If needed, include an option to use a padding oracle flow for the older weak crypto case, and a way to reuse a prebuilt encrypted payload.

Also set up a simple local Docker based demo environment with Tomcat and the PrimeFaces showcase app so I can run the test safely on my own machine. Keep it easy to run from the terminal, with a help screen and sensible defaults. If you need to check current docs or behavior, look them up online first.