Skip to content

Commit 56bfe57

Browse files
committed
add a screenshot with an example run
1 parent 67c7143 commit 56bfe57

File tree

2 files changed

+16
-2
lines changed

2 files changed

+16
-2
lines changed

README.md

Lines changed: 16 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44

55
This is a small python script that I use to prototype some potential use-cases when integrating large language models, such as GPT-3, with security-related tasks.
66

7-
This is prototype software and not intended for any serious use, esp. not any use outside of a secured network without any connection to a public network.
7+
What is it doing? More or less it creates a SSH connection to a configured virtual machine (I am using vulnerable VMs for that on purpose and then asks GPT-3 to find security vulnerabilities (which it often executes). Evicts a bit of an eerie feeling for me:
88

99
## High-Level Description
1010

@@ -53,7 +53,21 @@ The script uses `fabric` to do the SSH-connection. If one of GPT-3's commands wo
5353

5454
In practical terms this means, that if the script executes something like `sudo bash`, you will have an interactive shell. If it executes `vi file.txt`, you will be in an interactive shell. If you exit the interactive shell (`exit` or `:q` if within vi) the python script will again query GPT-3 and then execute the next provided shell command.
5555

56-
## Disclaimers
56+
# Example run
57+
58+
This happened during a recent run:
59+
60+
![Example wintermute run](example_run.png)
61+
62+
Some things to note:
63+
64+
- prompts for GPT-3 are prefixed with `openai-prompt`, the returned command from GPT-3 is prefixed with `openai-next-command` and the result from executing the command with `server-output`
65+
- the used SSH-library also displays the output produced by the commands executed through SSH --- this is why some stuff appears twice
66+
- wintermute executed `id` initially to get the user's id
67+
- the next command was `sudo -l`, listing the current users sudo permissions
68+
- wintermute then executes `sudo /bin/bash` and we're dropped into an interactive root shell
69+
70+
# Disclaimers
5771

5872
Please note and accept all of them.
5973

example_run.png

392 KB
Loading

0 commit comments

Comments
 (0)