KitPloit - PenTest Tools!
GPT_Vuln-analyzer - Uses ChatGPT API And Python-Nmap Module To Use The GPT3 Model To Create Vulnerability Reports Based On Nmap Scan Data

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCBHKSioYKOoSKBRyCLseiCSQ1SaYgS_rUpDdUZtojC97Cf6bBGG8BH4ILfnya8flM37Qmg67Sob9LGgELR6qnVXYrEIh6m1hBZpn2kNjDIcE2NvTa10QnkYqV1inzw3nAAqWTRG2HCj03mv6vCsmoMaMX8Rf0r5oktZPFj5KMjbc_h4wOjaoKoInORg/w640-h360/chatgpt_hack.jpeg This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT. Requirements* Python 3.10
* All the packages mentioned in the requirements.txt file
* OpenAi api Usage* First Change the "API__KEY" part of the code with OpenAI api key openai.api_key = "__API__KEY" # Enter your API key* second install the packages pip3 install -r requirements.txt
or
pip install -r requirements.txt* run the code python3 gpt_vuln.py or if windows run python gpt_vuln.py

Supported in both windows and linux Understanding the codeProfiles:
Parameter Return data Description Nmap Command p1jsonEffective Scan -Pn -sV -T4 -O -Fp2jsonSimple Scan -Pn -T4 -A -vp3jsonLow Power Scan -Pn -sS -sU -T4 -A -vp4jsonPartial Intense Scan -Pn -p- -T4 -A -vp5jsonComplete Intense Scan -Pn -sS -sU -T4 -A -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script=vulnThe profile is the type of scan that will be executed by the nmap subprocess. The Ip or target will be provided via argparse. At first the custom nmap scan is run which has all the curcial arguments for the scan to continue. nextly the scan data is extracted from the huge pile of data which has been driven by nmap. the "scan" object has a list of sub data under "tcp" each labled according to the ports opened. once the data is extracted the data is sent to openai API davenci model via a prompt. the prompt specifically asks for an JSON output and the data also to be used in a certain manner.

The entire structure of request that has to be sent to the openai API is designed in the completion section of the Program.

vulnerability analysis of {} and return a vulnerabilty report in json".format(analize) # A structure for the request completion = openai.Completion.create( engine=model_engine, prompt=prompt, max_tokens=1024, n=1, stop=None, ) response = completion.choices[0].text return response" dir="auto">def profile(ip):
nm.scan('{}'.format(ip), arguments='-Pn -sS -sU -T4 -A -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script=vuln')
json_data = nm.analyse_nmap_xml_scan()
analize = json_data["scan"]
# Prompt about what the quary is all about
prompt = "do a vulnerability analysis of {} and return a vulnerabilty report in json".format(analize)
# A structure for the request
completion = openai.Completion.create(
engine=model_engine,
prompt=prompt,
max_tokens=1024,
n=1,
stop=None,
)
response = completion.choices[0].text
return response Advantages* Can be used in developing a more advanced systems completly made of the API and scanner combination
* Can increase the effectiveness of the final system
* Highly productive when working with models such as GPT3 Download GPT_Vuln-analyzer

Hacking on Medium
Create Botnet in 2 minutes

https://cdn-images-1.medium.com/max/860/0*uiEh6S0TPoLYyHD6
Introduction

Continue reading on Medium »

Hacking on Medium
TRY HACK ME — Warzone 2

https://cdn-images-1.medium.com/max/700/0*kZzwviYSaum36CDQ.png
Hello, today we are going to solve a box on tryhackme “Warzone 2”

Continue reading on Medium »

Hacking on Medium
How do I keep my accounts safe from hackers?

https://cdn-images-1.medium.com/max/600/1*-w9JnYmLFLSPZHABrj5DmA.jpeg
Imagine this scenario.

Continue reading on Medium »

Hacking on Medium
How to Protect Your Critical Data from Hackers

https://cdn-images-1.medium.com/max/700/1*UXKNs2nI-y7cNVyBFJA1SA.jpeg
Protecting your critical data from hackers is a critical step in ensuring the security of your digital life. Here are some tips to help…

Continue reading on Medium »

Hacking on Medium
Protecting Your Digital Fortress: Understanding the Importance of Cybersecurity for Organisations

https://cdn-images-1.medium.com/max/600/1*l0TU4sxsd662mk8Tai8vVg.png
In today’s digital age, cybersecurity has become an increasingly critical aspect for organisations of all sizes and sectors. Cybersecurity…

Continue reading on Medium »

Hacking on Medium
Soccer — Hack The Box

https://cdn-images-1.medium.com/max/700/0*JVbiUVfQBUKtQE05.png
In this blog, we will solve a box on hackthebox called Soccer. it is the last box published on hackthebox for the year 2022.

Continue reading on Medium »

Hacking on Medium
b3dr0ck(EASY)- Try Hack Me

https://cdn-images-1.medium.com/max/700/0*bpdJsIltvC5nv_Tj.png
Hey, today we are going to solve b3dr0ck Try hack me

Continue reading on Medium »

Hacking on Medium
HACK THE BOX — TRICK

https://cdn-images-1.medium.com/max/700/0*R3_fbUqkl3wfKMwn.png
In this write up we’re going to pwn a box on hack the box called “TRICK”

Continue reading on Medium »

Hacking on Medium
TryHackMe — Pickle Rick CTF

https://cdn-images-1.medium.com/max/1920/1*oI-mrJuUN00omQnhK7eWNw.png
“Listen Morty… I need your help, I’ve turned myself into a pickle again and this time I can’t change back!” Rick, Pickle.

Continue reading on Medium »

Hacking on Medium
TRY HACK ME — Intermediate Nmap

https://cdn-images-1.medium.com/max/700/0*chU5NzfMD6Y4ytYC.png
Hello, today we are going to solve a box on tryhackme intermediate Nmap

Continue reading on Medium »

hacking: security in practice
If you choose PCs over Macs, why?

It’s widely considered Macs are safer, however if you don’t believe so, why? What pulls you towards PCs more? Just to spur different opinions and experiences.

submitted by /u/TKOx13
[link] [comments]