Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Shiva — Improved DOS exploit for wordpress websites (CVE-2018-6389) | Kitploit
Tools/GitHubGitHub/s0md3v/shiva
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubs0md3v/shiva

Shiva

Improved DOS exploit for wordpress websites (CVE-2018-6389)

View Repository
130635 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Shiva

First of all, put Shiva on watch. I will be upgrading it to a full stress testing suite over time. Shiva is designed to perform Denial Of Service (DOS) attack on wordpress sites by loading all jquery scripts at once through load-scripts.php. So basically its an exploit for CVE-2018-6389.

Awesomeness

  • Shiva uses multithreading to bring down websites as soon as possible,
  • You don't need to worry about your IP being exposed because Shiva uses Proxify to route all requests through random proxies which keep getting rotated automatically.

Dependencies & Compatibility

Shiva is compatible with both python2 and python3.
Dependencies:

  • requests
  • proxify

Usages

You can attack a target with Shiva as follows:

root@kitploit:~
python shiva.py -u target.com -t 50

Where target.com is the target website and 50 is the number of threads.
You must keep in mind that Shiva is only effective against wordpress site so make sure your target runs on wordpress.
Number of threads should be selected according to the network speed.

Download Tool