Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-1698-Exploit — This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698. | Kitploit
Tools/GitHubGitHub/kamranhasan/cve-2024-1698-exploit
Password AttacksVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubkamranhasan/cve-2024-1698-exploit

CVE-2024-1698-Exploit

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
82 years agoNot yet reviewed

CVE-2024-1698 Exploit Script - Wordpress NotificationX <= 2.8.2 - SQL Injection

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.

This Python script is intended for educational purposes only. It demonstrates a proof of concept for exploiting CVE-2024-1698 SQL injection vulnerability to extract admin credentials (username and password hash) from a WordPress website's NotificationX Analytics API. Please use this script responsibly and only on systems you are authorized to test. Unauthorized or malicious use is strictly prohibited.

Disclaimer

The author and contributors of this script are not responsible for any misuse, damage, or illegal activity caused by the use of this tool. Use at your own risk.

Requirements

  • Python 3.x
  • requests library

Usage

  1. Ensure you have Python 3.x installed on your system.

  2. Install the required dependencies by running:

    pip install requests

  3. Modify the url, delay, and other variables in the script according to your testing environment and requirements.

  4. Run the script:

    python exploit.py

  5. The script will attempt to extract the admin username and password hash. Results will be displayed if successful.

Proof of Concept

Legal and Ethical Considerations

  • Only use this script on systems you have explicit permission to test. Unauthorized access to computer systems is illegal and unethical.
  • Respect the privacy and security of others. Do not use this script to access sensitive information without proper authorization.
  • Understand and comply with the laws and regulations governing penetration testing and ethical hacking in your jurisdiction.
  • Use responsible disclosure practices if you discover security vulnerabilities while testing.

Acknowledgements

This script is for educational purposes and was created to demonstrate the risks associated with SQL injection vulnerabilities. We encourage users to learn about web security best practices and contribute to improving the security posture of web applications.

Detail blog on CVE-2024-1698 by White Hack Labs : Blog Post

License

This script is licensed under the MIT License. See the LICENSE file for details.

This README emphasizes responsible use, legal and ethical considerations, and encourages users to only use the script for educational purposes and with proper authorization.

Download Tool