| शीर्षक | ipa-lab hackingBuddyGPT v1.0 RCE |
|---|
| विवरण | HackingBuddyGPT is an LLM-driven pentest agent that uses an SSH connection to interact with a target machine. The raw output from commands executed on the target is captured and appended to the LLM's conversation history without any sanitization or taint marking. A compromised target can embed prompt-injection text in its command output (e.g., in shell motd, CLI tool output, or filesystem contents). When the LLM processes this injected context, it can be directed to generate arbitrary shell commands. These commands are then executed on the operator's local workstation via tmux send-keys, not in a sandbox — resulting in remote code execution on the operator's machine. |
|---|
| स्रोत | ⚠️ https://github.com/ipa-lab/hackingBuddyGPT/issues/150 |
|---|
| उपयोगकर्ता | ez-lbz (UID 87033) |
|---|
| सबमिशन | 04/08/2026 10:19 AM (1 महीना पहले) |
|---|
| संयम | 12/09/2026 10:22 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403203 [ipa-lab HackingBuddyGPT तक 0.5.0 ssh_run_command.py ssh_run_command अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|