You can connect to basically any normal web server/service and waste their bandwidth/resources in the same way by downloading data they provide publicly.
If you think this is a real vulnerability I'd suggest you report it to any project like that, a proof of concept exploit would basically involve curl in a while loop with the output going to /dev/null.
If you think this is a real vulnerability I'd suggest you report it to any project like that, a proof of concept exploit would basically involve curl in a while loop with the output going to /dev/null.
Here's an incomplete list of applications that should also have this vulnerability that you can start going through: https://en.wikipedia.org/wiki/Comparison_of_web_server_softw...