ask GPT for an explanation after each command

Author: andreashappe

templates/explain_system.txt

@@ -0,0 +1,13 @@
+You currently have the following information about the system:
+
+~~~
+${sysinfo}
+~~~
+
+You executed the command ${cmd} and the system returned the following output:
+
+~~~
+${cmd_output}
+~~~
+
+Describe how you expect the system to work.

templates/gpt_query.txt renamed to templates/query_next_command.txt

@@ -9,4 +9,4 @@ You already executed some commands:
 	- when you executed the command "${entry["cmd"]}" the console output was "${entry["result"]}"
 	% endfor
 %endif
-Respond with a linux command to give to the server. The command should be used for enumeration or privilege escalation. Do not add any explanation.
+Respond with a linux command to give to the server. The command should be used for enumeration or privilege escalation. Do not add any explanation.

templates/further_information.txt renamed to templates/query_vulnerabilitites.txt

@@ -19,18 +19,23 @@
 print("Get initial user from virtual machine:")
 initial_user = conn.run("whoami")
 
+sysinfo = "This is a linux-based system."
+
 while True:
 
-    next_cmd = create_and_ask_prompt('gpt_query.txt', "next-cmd", user=initial_user, history=cmd_history.get_history())
+    # TODO: separate between techniques (let GPT search for vulnerabiltiites) and procedures (concrete exploitation of a technique). This would make the exeuction loop a bit harder to understand and hierarchical, e.g., select a technique -> ask GPT how to exploit this technique (with a command sequence) -> execute and watch
 
-    # disable this for now, it's tragic because the AI won't tell me why it had chosen something
-    # create_and_ask_prompt("why.txt", "why", user=initial_user, history=cmd_history.dump(), next_cmd=next_cmd)
+    next_cmd = create_and_ask_prompt('query_next_command.txt', "next-cmd", user=initial_user, history=cmd_history.get_history())
 
     resp = conn.run(next_cmd)
     cmd_history.append(next_cmd, resp)
 
     # this will already by output by conn.run
     # logs.warning("server-output", resp)
 
+    # aks chatgpt to explain what it expects about the tested
+    # system. Understanding this might help human learning
+    system_explanation = create_and_ask_prompt('explain_system.txt', 'explain-system', sysinfo=sysinfo, cmd=next_cmd, cmd_output=resp)
+
     # this asks for additional vulnerabilities identifiable in the last command output
-    # create_and_ask_prompt('further_information.txt', 'vulns', user=initial_user, next_cmd=next_cmd, resp=resp)
+    # create_and_ask_prompt('query_vulnerabilities.txt', 'vulns', user=initial_user, next_cmd=next_cmd, resp=resp)