- 
          
- 
                Notifications
    You must be signed in to change notification settings 
- Fork 133
Added web-api-pentest prototype #47
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…get better results for documentation
        
          
                usecases/web/simple.py
              
                Outdated
          
        
      | class MinimalWebTesting(RoundBasedUseCase): | ||
| llm: OpenAILib | ||
| host: str = parameter(desc="The host to test", default="http://localhost") | ||
| host: str = parameter(desc="The host to test", default="https://api.restful-api.dev/objects") | 
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
using localhost would be nice, so to not attack third-parties
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would move openapi_spec into the docs directory to make it clear, that this is just an example
        
          
                usecases/web/simple.py
              
                Outdated
          
        
      | result = response.execute() | ||
| self.console.print(Panel(result, title="tool")) | ||
| self._prompt_history.append(tool_message(result, tool_call_id)) | ||
| for i in self._prompt_history: | 
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this looks like forgotten debug prints, maybe remove?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thank you for implementing the change suggestions
I added two use-cases (SimpleWebAPIDocumentation and SimpleWebAPITesting) and a Prompt Engineer.
The Prompt Engineer is responsible for generating prompts based on three different prompt strategies (In-context learning, chain-of-thought, tree-of-thought)