Write a python (or other) script

I have a VM box with WAF, but it does have a website that is command injection vulnerable. My task is to write a script that not only uses this vulnerability to drop a shell file on that VM but also to stay connected even after rebooting.
If you can help with part of this and for more details, contact me.
I can provide the VM.