GreyDGL
commented
1 year ago This should be an issue with the current interaction logic. The to_do command requires the user to input at least one "test progress" information so that it could analyze the task information. This means that after initialization, user ideally should use next command to input some recon result first.
I'll fix this bug. Meanwhile, can you try if the problem persist if you use next command first to write some information, and then run to_do again?
RitchZoeSquad
anoth3rus3r
hikame
Describe the bug various errors thrown as follows. Seems that (bottom line) an auth error and reattempts to auth may have led to cloudflare blocking the egress NAT IP of my VMs. (ouch)
But using the browser interface, which appears to be using the same cookie material, allows for ChatGPT interaction.
After all this, thinking that it might be helpful for the output to include some clear messaging / feedback indicating the auth error, that this might cause cloudflare blocks, and some clear ideas on process to go about finding / validating block / process to unblock (clear as mud to me so far)
Thougths?
here is what I believe my process was: pasted cookie and api key into config file error thrown - appeared that log file could not be written chmod o+w -R
==> python3 /usr/local/lib/python3.8/dist-packages/pentestgpt/main.py__ Output: begin paste Do you want to continue from previous session? (y/n) n
Traceback (most recent call last): File "main.py", line 33, in
main()
File "main.py", line 29, in main
pentestGPTHandler.main()
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 643, in main
self.initialize(previous_session_ids=loaded_ids)
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 221, in initialize
self._feed_init_prompts()
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 147, in _feed_init_prompts
self.prompts.first_todo + _response
TypeError: can only concatenate str (not "tuple") to str
end paste
==> wireshark
capture shows DNS lookups to openai via cloudflare - but as all content TLS, obfuscated and not seeing any clear auth OK or auth error.
==> pentestgpt --reasoning_model GPT4 --useAPI error changes to: begin paste Do you want to continue from previous session? (y/n) n
end paste
Removing the "--useAPI" results in:
begin paste ==> pentestgpt --reasoning_model GPT4 Do you want to continue from previous session? (y/n) n
Traceback (most recent call last): File "/usr/local/bin/pentestgpt", line 8, in
sys.exit(main())
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/main.py", line 29, in main
pentestGPTHandler.main()
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 643, in main
self.initialize(previous_session_ids=loaded_ids)
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 221, in initialize
self._feed_init_prompts()
File "/home/kali/.local/lib/python3.8/site-packages/pentestgpt/utils/pentest_gpt.py", line 147, in _feed_init_prompts
self.prompts.first_todo + _response
TypeError: can only concatenate str (not "tuple") to str
end paste
finally checked log file and found "...pentestgpt.utils.chatgpt:get_authorization:<123 && 124> - You encounter an error when communicating with ChatGPT. The most likely reason is that your cookie expired." followed by "...
Sorry you have been blocked.
..." "... [IP:But using the browser interface, which appears to be using the same cookie material, allows for ChatGPT interaction.