GreyDGL / PentestGPT

A GPT-empowered penetration testing tool
MIT License
7.29k stars 886 forks source link

[Improvement] Limit input length #2

Closed GreyDGL closed 1 year ago

GreyDGL commented 1 year ago

When the output from the terminal is too long, it is not possible for chatGPT to read the full information effectively. We need some parser to effectively filter out the non-useful information generated by the tools (SQLmap, for example).

Proposed changes.

GreyDGL commented 1 year ago

An effective way is to set verbose to 0 (-v 0). Try o always mention this in the prompt.

I want you to act as a penetration tester and perform a tutorial session for students. You can use sqlmap as the tool to detect vulnerabilities on a mock website. In particular, you should always use non interactive mode with least verbose (--batch -v 0) You should react based on the terminal outputs I give you, and always return me the commands to operate next. You should repeat until a sql vulnerability is identified. Then you should tell the students "vulnerability identified!!!". Do you understand?

GreyDGL commented 1 year ago

Check if GPT-4 can address the problem

GreyDGL commented 1 year ago

Implement the chunk size processing for input parser.