mantiumai / chirps

Discover sensitive/confidential information stored in a vector database
GNU General Public License v3.0
57 stars 7 forks source link

Implement APIEndpointAsset vulnerability detection #180

Closed alex-nork closed 10 months ago

alex-nork commented 10 months ago

Assets like the RedisAsset and MantiumAsset use their class's search function to query vector databases. The APIEEndpointAsset should use something similar to make requests.

The expected behavior is a conversational back-and-forth between attacker and target, so this function should accept a message string which is then included in the POST request's body. The asset's response should be provided to the attacker so that it can determine if the success criteria has been met, or if it must generate its next message.

alex-nork commented 10 months ago

All done