ChatGPT for Hacking

Bug bounty and pentesting are crucial components of the cyber security landscape. These activities involve identifying and exploiting vulnerabilities in networks and systems in order to help improve their security. In recent years, a new tool has emerged that has the potential to greatly enhance the capabilities of bug bounty hunters and pentesters: ChatGPT.

Talk was part of Rootecstak

Transcript

1. CHATGPT FOR HACKING Unleashing the Power of ChatGPT for Bug Bounty and Penetration Testing -Anugrah SR Rootecstak
2. TODAY'S AGENDA What is ChatGPT 1 Use cases in Hacking 2 Limitations 3 Prompts 4
3. > Anugrah SR Anugrah ChatGPT root@cypher:~#whoami > Cyber Security consultant at SecOps Group Independent Bugbounty Hunter Synack Red Team Member > Blogger, Speaker anugrahsr.in | p1boom.com > Find me here Twitter: @cyph3r_asr LinkedIn: anugrah-sr Web: anugrahsr.in
4. Data is the new oil AGE OF AI What is AI AI stands for artificial intelligence, which refers to the simulation of human intelligence in machines that are programmed to think and learn like humans. Unmanned Drones Self driving cars Smart assistance Spam filters Robots Facial Recognition 1 Computing Power increased 2 Make life easy 3
6. The development of deep learning, a subfield of machine learning that uses neural networks with many layers to learn from and make predictions on data. This has led to significant improvements in areas such as image and speech recognition, natural language processing, and computer vision. Most notable advancements in AI
7. Computer Vision https://thispersondoesnotexist.com/
8. Image Generation
9. Speech Recognition
10. Focuses on the interaction between computers and human languages. The goal of NLP is to develop techniques that enable computers to understand, interpret, and generate human language. Natural Language Processing speech recognition machine translation sentiment analysis text summarization question answering. NLP techniques are used in a wide range of applications, such as These techniques are based on a combination of linguistics, computer science, and machine learning.
11. Text tokenization: breaking a sentence or a text into words, phrases, or sentences. Part-of-speech tagging: identifying the grammatical role of words in a sentence. Named entity recognition: identifying and classifying named entities such as people, organizations, and locations in a text. Sentiment analysis: determining the attitude or emotion expressed in a text. Text summarization: creating a shorter version of a text that preserves its main ideas. Some of the most common NLP tasks include: Natural Language Processing
12. WHAT IS CHATGPT-3 Are You Ready?
13. OPENAI ChatGPT-3 is a state-of-the-art language generation model developed by OpenAI. It was founded in 2015 by Elon Musk and others OpenAI is a research organization that aims to promote and develop friendly AI in a responsible way.
14. CHATGPT-3 GPT-3 is "Generative Pre-trained Transformer 3" . It is a language generation model developed by OpenAI, that uses deep learning techniques to generate human-like text. GPT-3 Nov 30 2022 ChatGPT-3 was released and rest was history
15. IT WAS VIRAL People started taking advantage of it and having fun with it
17. Accessing ChatGPT https://chat.openai.com/
18. Accessing ChatGPT https://chat.openai.com/
19. Accessing ChatGPT https://chat.openai.com/chat
20. https://chat.openai.com/chat
21. Let's see how as hacker we can use it
22. What is prompt A prompt is a piece of text that guides the GPT-3 model in generating relevant and coherent text. It sets the context and topic for the generated text and the quality of the generated text is highly dependent on the prompt provided. New job role: prompt engineer a prompt engineer is a person who is responsible for designing and creating prompts for a language generation model like GPT-3, with the goal of ensuring that the generated text is relevant, coherent, and of high quality.
23. Before you use ChatGPT It is only as good as the data it has been trained on, so it may not be able to generate responses to prompts or situations that it has not seen before. Do not put your sensitive information prompt Always verify the information
24. what are some prompt that a hacker can use?
25. Are you looking for a mentor? how can I get started in cyber security? can you teach me what is an ssrf with example what are places to learn about bugbounty
26. Help you write Reports write a pentest report for a sql finding at endpoint "http://testphp.vulnweb.com/search.php?test=test%27" with remediation, recommendation ,step to reproduce
27. Help you write Emails
28. Help you write Blog
29. Help you write Automation Script
30. Help you write your own CTF
31. Help you write your own Burp Extension
32. Make tools faster
33. Help you write your own Burp Extension
34. Help you write your own Nuclei template
35. Help you write your own Browser Extension
36. Help you find bugs in code
39. Banning ChatGPT The primary objective of the OSCP exam is to evaluate your skills in identifying and exploiting vulnerabilities, not in automating the process.
40. Will AI replace me? The short answer is NO But some who know how to use AI will
41. https://anugrahsr.in/chatgpt-for-hacking/
42. Thank you Twitter @cyph3r_asr LinkedIn @anugrah-sr www.anugrahsr.in Slides will be available here: