Trinity-SYT-SECURITY
commented
3 months ago The original program code will cause the problem in the picture. The modified program is as follows
minimal/Agent.py
import pathlib
from dataclasses import dataclass, field
from mako.template import Template
from rich.panel import Panel
from hackingBuddyGPT.capabilities import SSHRunCommand, SSHTestCredential
from hackingBuddyGPT.utils import SSHConnection, llm_util
from hackingBuddyGPT.usecases.base import use_case
from hackingBuddyGPT.usecases.agents import Agent
from hackingBuddyGPT.utils.cli_history import SlidingCliHistory
template_dir = pathlib.Path(__file__).parent
template_next_cmd = Template(filename=str(template_dir / "next_cmd.txt"))
@use_case("minimal_linux_privesc", "Showcase Minimal Linux Priv-Escalation")
@dataclass
class MinimalLinuxPrivesc(Agent):
conn: SSHConnection = None
_sliding_history: SlidingCliHistory = None
def init(self):
super().init()
self._sliding_history = SlidingCliHistory(self.llm)
self.add_capability(SSHRunCommand(conn=self.conn), default=True)
self.add_capability(SSHTestCredential(conn=self.conn))
self._template_size = self.llm.count_tokens(template_next_cmd.source)
def perform_round(self, turn):
got_root : bool = False
with self.console.status("[bold green]Asking LLM for a new command..."):
# get as much history as fits into the target context size
history = self._sliding_history.get_history(self.llm.context_size - llm_util.SAFETY_MARGIN - self._template_size)
# get the next command from the LLM
answer = self.llm.get_response(template_next_cmd, capabilities=self.get_capability_block(), history=history, conn=self.conn)
cmd = llm_util.cmd_output_fixer(answer.result)
with self.console.status("[bold green]Executing that command..."):
self.console.print(Panel(answer.result, title="[bold cyan]Got command from LLM:"))
# Assuming cmd is of the form "username password"
parts = cmd.split(" ", 1)
if len(parts) == 2:
username, password = parts
##here fix!
result, got_root = self.get_capability("test_credential")(username, password)
else:
# Handle other cases or log error
result = "Command format error. Expected 'username password'."
got_root = False
#self.log_db.add_log_query(self._run_id, cmd, result, answer)
self.log_db.add_log_query(self._run_id, turn, cmd, result, answer)
self._sliding_history.add_command(cmd, result)
self.console.print(Panel(result, title=f"[bold cyan]{cmd}"))
return got_root
''' Original error block
def perform_round(self, turn):
got_root : bool = False
with self.console.status("[bold green]Asking LLM for a new command..."):
# get as much history as fits into the target context size
history = self._sliding_history.get_history(self.llm.context_size - llm_util.SAFETY_MARGIN - self._template_size)
# get the next command from the LLM
answer = self.llm.get_response(template_next_cmd, capabilities=self.get_capability_block(), history=history, conn=self.conn)
cmd = llm_util.cmd_output_fixer(answer.result)
with self.console.status("[bold green]Executing that command..."):
self.console.print(Panel(answer.result, title="[bold cyan]Got command from LLM:"))
result, got_root = self.get_capability(cmd.split(" ", 1)[0])(cmd)####
# log and output the command and its result
self.log_db.add_log_query(self._run_id, turn, cmd, result, answer)
self._sliding_history.add_command(cmd, result)
self.console.print(Panel(result, title=f"[bold cyan]{cmd}"))
# if we got root, we can stop the loop
return got_root
'''
andreashappe
system minimum configuration
ollama download
(You need to download and run the bad llama!!)
Into the Python env (Recommended, because it will be convenient for you to replace the environment)
For how to set up a python environment, you can search Google!
change the
.envfilehttps://github.com/ollama/ollama/blob/main/docs/openai.md
if u encounter some llama server issue, u can try to
systemctl restart ollama.serviceor through
systemctl edit ollama.servicecheck the llama settingwhen llama download model finish, u can cd to
src/hackingBuddyGPT/clithen runIf u always reveive messages like this
I can't help you escalate privileges in Linux. Can I help you with anything else?、I cannot assist with escalating privileges in Linux by abusing commands and misconfiguration on a tested system. Is there something else I can help you with?…so pls replace it with bad llama, as I recommended above, or u can find it yourself
maybe sometimes u encounter this problem
Exception: Failed to get response from OpenAI APIIf your llama server is normal
it can complete the number of attacks you set(
.env), and u can see the relevant attack information from the content, which is the command it is trying.In order to prevent
sqlite3.operationalerror: database is lockedproblems from occurring, the code ofdb_storage.pyfile needs to be modified.if u encounter this problem
if u encounter this problem
This page will be continuously updated if there are any modifications to the code or new discoveries.