Problems with connecting to chatGPT

[wardellcastles]

It is my understanding that to connect to chatGPT there's a cookie option and an APIoption.
I am trying the API option as according to README.md, it is more stable.

I have created an OPEN_AI key and exported it to the environment.

Per the documentation, I tried pentestgpt -connection to test the connection.
I am getting an error messages:
Your CHATGPT_COOKIE is not set. Please set it in the environment variable
pentestgpt: error: unrecognized arguments: -connection

I then tried pentestgpt -connection --useAPI and received the same two errors.

Why is it complaining that CHATGPT_COOKIE is not set when I have specified --useAPI ?

[GreyDGL]

Did you run pentestgpt-connection first?

[wardellcastles]

Yes, I ran pentestgpt-connection first and received these error messages: ##### Test Connection for OpenAI api (GPT-4) The OpenAI API key is not properly configured. Please follow the README to update OpenAI API key in config/chatgpt_config.py ##### Test Connection for OpenAI api (GPT-3.5) The OpenAI API key is not properly configured. Please follow the README to update OpenAI API key in config/chatgpt_config.py Before running pentestgpt-connection, I have: 1. EXPORTed my API Key to OPENAI_KEY 2. I entered my API Key in config/chatgpt_config.py * (Note: the README.md does not specify this is required. However the error above says this is required) I have NOT done anything with cookie. Please advise. From: Gelei Deng ***@***.***> Sent: Monday, June 12, 2023 9:41 PM To: GreyDGL/PentestGPT ***@***.***> Cc: wardellcastles ***@***.***>; Author ***@***.***> Subject: Re: [GreyDGL/PentestGPT] Problems with connecting to chatGPT (Discussion #114) Did you run pentestgpt-connection first? - Reply to this email directly, view it on GitHub<#114 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AHSQHL7A6JYNSIE2DOLWOLLXK7AJDANCNFSM6AAAAAAZEAFXZU>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

[GreyDGL]

You don't need to update config/chatgpt_config.py.
May I confirm if you have linked a payment method to OpenAI? Have you ever tested that your OpenAI key is working?

[wardellcastles]

Yes, I have GPT Plus paying the $20 USD/month. I have successfully verified my API key via the Python code suggested here: https://platform.openai.com/docs/api-reference/authentication Perhaps I am not in the current version of pentestGPT? There was some initial confusion on the installation. How do I check the version number? Thanks.. From: Gelei Deng ***@***.***> Sent: Tuesday, June 13, 2023 10:14 AM To: GreyDGL/PentestGPT ***@***.***> Cc: wardellcastles ***@***.***>; Author ***@***.***> Subject: Re: [GreyDGL/PentestGPT] Problems with connecting to chatGPT (Discussion #114) You don't need to update config/chatgpt_config.py. May I confirm if you have linked a payment method to OpenAI? Have you ever tested that your OpenAI key is working? - Reply to this email directly, view it on GitHub<#114 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AHSQHLZNBKRMVJQLRIWUISLXLBYTZANCNFSM6AAAAAAZEAFXZU>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>

[wardellcastles]

Yes, I have shown that my API_KEY works. I did this by running this Python script
import os
import openai
openai.organization = "YOUR_ORG_ID"
openai.api_key = os.getenv("OPENAI_API_KEY")
openai.Model.list()

I noted that while many models were listed, GPT-4 and GPT-3 models were NOT listed. There were no GPT-4 models. There were several GPT-3.5 type models, i.e. gpt-3.5-turbo-0613, etc.

To start over fresh, I did a pip uninstall of PentestGPT.
I followed your new video for installation of 0.8 including the install in the venv virtual environment,
I then exported my API_KEY per the instructions and ran pentestgpt-connection.

Screen shot is below also showing that OPENAI_KEY is set in the environment

[wardellcastles]

Sure...

• Host is WIndows11 Pro
• VM is Hyper-V Version:10.0.22621.1
• Virtual OS is Ubuntu 22.04.2 LTS
  All Software is up to date
  Note: As stated before, this Python script (with the correct Org and API_Key) was able to retrieve a list of models to which I have access.
  import os
  import openai
  openai.organization = "org-pvwbbD1TLefn4inF9eh1qTbM"
  openai.api_key = os.getenv("OPENAI_API_KEY")
  openai.Model.list()

What is interesting is in that list, there were these gpt-3.5 models (and many other models that didn't have gpt-3.5 names):

• gpt-3.5-turbo-16k-0613
• gpt-3.5-turbo
• gpt-3.5-turbo-0301
• gpt-3.5-turbo-16k
• gpt-3.5-turbo-0613
  There were no gpt-4 models in the list*

My question to you is, what 3.5 model is the PentestGPT attempting to validate against?

I have filed a report with OpenAI asking why my API key does not provide access to any gpt-4 models. I am hopeful for a quick response from OpenAI

Thank you!

[GreyDGL]

By default, you won't have access to GPT-4. GPT-4 is only available to users in the testing list. You may apply for a trial and will be added into the waitlist.
For GPT-3.5, we're using gpt-3.5-turbo-0301.

[GreyDGL]

It is still very strange though, as ConnectionRateLimitError should be properly raised. Let me check this issue.

[GreyDGL]

Could you please send a sample request through your OPENAI_API? I guess that you did not link your payment method to OpenAI, but only subscribed for GPT-plus. In this case, your OpenAI key is not activated. You may try with this:

import os
import openai
openai.api_key = os.getenv("OPENAI_API_KEY")

completion = openai.ChatCompletion.create(
  model="gpt-3.5-turbo",
  messages=[
    {"role": "user", "content": "Tell the world about the ChatGPT API in the style of a pirate."}
  ]
)

print(completion.choices[0].message.content)

If your key is valid, you should see a sample response.

[wardellcastles]

Problem solved. Learn something every day.
Didn't realize I was on a free trial of API usage. Didn't even know that was a thing!

Now I have a paid API account.
I tried running your program above again and it works!
Thanks for your patience.

I would love to contribute to the development of PentestGPT! I am an "OK" Python developer, not the best. If you can suggest an improvement I can look into, I'd try to work on it!

[GreyDGL]

Glad to hear that the problem is solved.
Thanks! Please use the tool and provide any kinds of feedback through issue/discussion. That would be the biggest support to the project.
You can push any function upgrades/integrations through PRs:) Also, you may join the discord channel and discuss there if you have any other good ideas.