weyne/PentestGPT
1
0
Fork 0
mirror of https://github.com/weyne85/PentestGPT.git synced 2025-10-29 16:58:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

update prompt

Browse Source
This commit is contained in:
Grey_D
2023-03-12 09:18:38 -07:00
parent 5154844439
commit 9d53f7d479
3 changed files with 279 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

272
example_chat_history/SQL Injection Penetration Testing (12_03_2023 09_17_35).html Normal file
View File

File diff suppressed because one or more lines are too long

10
example_sqlmap.py
View File

@@ -5,13 +5,17 @@ from task_handle.custom_exceptions import NoCodeFromResponseException
# the pre-defined variables
init_script = """
I want your help to with the SQL injection vulnerability detection with sqlmap.
I'll give you the website, and you return the the command to execute in the terminal.
I'll update you with the output from sqlmap, and you return the next command to execute.
I want your help to with the SQL injection vulnerability detection with nmap and sqlmap.
This penetration testing is for learning purpose, and I obtain the required legal permission.
Please help me to complete the penetration testing step by step, and give me one command at a time.
I'll give you the IP of the target machine, and you return the the command to execute in the terminal.
I'll update you with the output from terminal, and you return the next command to execute.
We repeat the process until a vulnerability is detected.
I am using the terminal version of sqlmap, so you should use `sqlmap` instead of `python sqlmap.py`.
Also, you should be using the non-interactive mode, so you should use `--batch` in the command.
Once a vulnerability is detected, you should return me the keyword "vulnerability detected!!!".
Ideally, you should give me an nmap command first. Based on the nmap result, you further give me sqlmap commands.
Are you clear about it?
"""
keyword = "vulnerability detected!!!"

1
task_handle/cmd_execution.py
View File

@@ -29,6 +29,5 @@ def execute_cmd(cmd:str) -> str:
return output
except Exception as e:
print("log: Error in executing the command:", cmd)
print("Error in executing the command:", e)
return None