ChatGPT for Hacking

Bug bounty and pentesting are crucial components of the cyber security landscape. These activities involve identifying and exploiting vulnerabilities in networks and systems in order to help improve their security. In recent years, a new tool has emerged that has the potential to greatly enhance the capabilities of bug bounty hunters and pentesters: ChatGPT.

Talk was part of Rootecstak

Transcript

1. CHATGPT FOR
   HACKING
   Unleashing the
   Power of
   ChatGPT for
   Bug Bounty and
   Penetration
   Testing
   -Anugrah SR
   Rootecstak
   

   View Slide

2. TODAY'S
   AGENDA
   What is ChatGPT
   1
   Use cases in Hacking
   2
   Limitations
   3
   Prompts
   4
   

   View Slide

3. > Anugrah SR
   Anugrah
   ChatGPT
   root@cypher:~#whoami
   > Cyber Security consultant at SecOps Group
   Independent Bugbounty Hunter
   Synack Red Team Member
   > Blogger, Speaker
   anugrahsr.in | p1boom.com
   > Find me here
   Twitter: @cyph3r_asr
   LinkedIn: anugrah-sr
   Web: anugrahsr.in
   

   View Slide

4. Data is the new oil
   AGE OF AI What is AI
   AI stands for artificial intelligence, which refers
   to the simulation of human intelligence in
   machines that are programmed to think and
   learn like humans.
   Unmanned Drones
   Self driving cars
   Smart assistance
   Spam filters
   Robots
   Facial Recognition
   1
   Computing Power increased
   2
   Make life easy
   3
   

   View Slide

5. View Slide

6. The development of deep learning, a subfield of machine learning that uses neural
   networks with many layers to learn from and make predictions on data.
   This has led to significant improvements in areas such as image and speech
   recognition, natural language processing, and computer vision.
   Most notable advancements in AI
   

   View Slide

7. Computer Vision
   https://thispersondoesnotexist.com/
   

   View Slide

8. Image Generation
   

   View Slide

9. Speech Recognition
   

   View Slide

10. Focuses on the interaction between computers and human languages.
    The goal of NLP is to develop techniques that enable computers to understand,
    interpret, and generate human language.
    Natural Language Processing
    speech recognition
    machine translation
    sentiment analysis
    text summarization
    question answering.
    NLP techniques are used in a wide range of applications, such as
    These techniques are based on a combination of linguistics,
    computer science, and machine learning.
    

    View Slide

11. Text tokenization: breaking a sentence or a text into words, phrases, or
    sentences.
    Part-of-speech tagging: identifying the grammatical role of words in a
    sentence.
    Named entity recognition: identifying and classifying named entities
    such as people, organizations, and locations in a text.
    Sentiment analysis: determining the attitude or emotion expressed in a
    text.
    Text summarization: creating a shorter version of a text that preserves its
    main ideas.
    Some of the most common NLP tasks include:
    Natural Language Processing
    

    View Slide

12. WHAT IS
    CHATGPT-3
    Are You Ready?
    

    View Slide

13. OPENAI
    ChatGPT-3 is a state-of-the-art language generation model developed by OpenAI.
    It was founded in 2015 by Elon Musk and others
    OpenAI is a research organization that aims to promote and develop friendly AI in a responsible way.
    

    View Slide

14. CHATGPT-3
    GPT-3 is "Generative Pre-trained Transformer 3" . It is a language generation model
    developed by OpenAI, that uses deep learning techniques to generate human-like text.
    GPT-3
    Nov 30 2022 ChatGPT-3 was released and rest was history
    

    View Slide

15. IT WAS VIRAL
    People started taking advantage of it and
    having fun with it
    

    View Slide

16. View Slide

17. Accessing ChatGPT
    https://chat.openai.com/
    

    View Slide

18. Accessing ChatGPT
    https://chat.openai.com/
    

    View Slide

19. Accessing ChatGPT
    https://chat.openai.com/chat
    

    View Slide

20. https://chat.openai.com/chat
    

    View Slide

21. Let's see how as hacker
    we can use it
    

    View Slide

22. What is prompt
    A prompt is a piece of text that guides the GPT-3 model in generating relevant and coherent text. It sets the context
    and topic for the generated text and the quality of the generated text is highly dependent on the prompt provided.
    New job role: prompt engineer
    a prompt engineer is a person who is
    responsible for designing and creating
    prompts for a language generation model
    like GPT-3, with the goal of ensuring that
    the generated text is relevant, coherent,
    and of high quality.
    

    View Slide

23. Before you use ChatGPT
    It is only as good as the data it has been trained
    on, so it may not be able to generate responses to
    prompts or situations that it has not seen before.
    Do not put your sensitive information prompt
    Always verify the information
    

    View Slide

24. what are some prompt that
    a hacker can use?
    

    View Slide

25. Are you looking for a mentor?
    how can I get started in cyber security?
    can you teach me what is an ssrf with example
    what are places to learn about bugbounty
    

    View Slide

26. Help you write Reports
    write a pentest report for a sql finding at endpoint "http://testphp.vulnweb.com/search.php?test=test%27" with
    remediation, recommendation ,step to reproduce
    

    View Slide

27. Help you write Emails
    

    View Slide

28. Help you write Blog
    

    View Slide

29. Help you write Automation Script
    

    View Slide

30. Help you write your own CTF
    

    View Slide

31. Help you write your own Burp Extension
    

    View Slide

32. Make tools faster
    

    View Slide

33. Help you write your own Burp Extension
    

    View Slide

34. Help you write your own Nuclei template
    

    View Slide

35. Help you write your own Browser
    Extension
    

    View Slide

36. Help you find bugs in code
    

    View Slide

37. View Slide

38. View Slide

39. Banning ChatGPT
    The primary objective of the OSCP exam is to
    evaluate your skills in identifying and exploiting
    vulnerabilities, not in automating the process.
    

    View Slide

40. Will AI replace me?
    The short answer is NO
    But some who know how to use AI will
    

    View Slide

41. https://anugrahsr.in/chatgpt-for-hacking/
    

    View Slide

42. Thank you
    Twitter
    @cyph3r_asr
    LinkedIn
    @anugrah-sr
    www.anugrahsr.in
    Slides will be available here:
    

    View Slide