search

hisxo / ReconAIzer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
823 stars 98 forks source link

A minor suggestion about the prompt #3

Open irsdl opened 1 year ago

irsdl commented 1 year ago

It might be better if we don't trigger the AI policies against hacking and exploitation by changing the prompt to something like this:

As a web expert and skilled software tester, your are my assistant. By analysing the following HTTP request and guessing the potential used technology, create 50 possible path which may point at some valid resources

It needs to be modified to be more effective but it should show what I mean by not being a hacker but a legitimate software tester!

irsdl commented 1 year ago

I know it is a fun project, but there is probably future for similar ideas.

hisxo commented 1 year ago

Hi @irsdl ! 🙂

Yup, I do think we can improve the prompts to be more effective and contextualized for each application. One idea I also have in mind is to give the user the ability to directly edit the prompts in a "Config" sub-tab.

Hisxo