https://osiriz.dev/tags/chatbot/Recent content in chatbot on OsirizHugo -- gohugo.ioen-usMon, 18 Mar 2024 08:00:00 +0100https://osiriz.dev/posts/2024/03/ddc-2024-qualification-campfire-stories/Mon, 18 Mar 2024 08:00:00 +0100https://osiriz.dev/posts/2024/03/ddc-2024-qualification-campfire-stories/We are given the website campfire-stories.hkn which looks like this: We can write the beginning of a story and the AI will continue it for us. Looking at robots.txt we get: # https://www.robotstxt.org/robotstxt.html # Maybe we should not train on company data? # Could our ftp credentials be leaked by the AI? # Probably not a problem. Nobody writes stories about ftp anyway # datacenter.campfire-stories.hkn should still be safe right? User-agent: * Disallow: / Allow: /$ Allow: /share/* Allow: /images/* Allow: /static/* Which seems to suggest that the AI bot can leak the ftp credentials, so let’s try: Convert Z3B0OTAwMA== from base64 gives us gpt9000, so lets login to datacenter.