What the fuck is kali-gpt?

Hello everyone,

I wasn’t sure about bringing this topic from LinkedIn over here, but I didn’t want to feel foolish by not investigating it.

So, here’s how it started: I shared a LinkedIn post saying the following:

Can someone explain this to me? I’ve seen so many people talking about something called “Kali GPT” and how it’s a revolutionary tool that’ll magically help offsec pros!

So I thought, “Whoa, finally! Maybe OffSec released an AI-powered Kali Linux? Or partnered with OpenAI? Or dropped a brand-new GPT model just for offensive cybersecurity?”

But when I searched… crickets. Did I totally botch my Google-fu? Then I stumbled on this:
https://lnkd.in/e_6nNJ-c
(created by https://lnkd.in/e_DP36YX)

Turns out it’s none of the above just a random person’s GPT wrapper, something anyone can spin up. In fact, this kind of thing’s been around for over a year : CyberGPT, HackTricksGPT, Threat Intel Bot, and more… or you can build your own in minutes.

And if this hype is about using GPT from the kali terminal using OpenAI API like in this video https://lnkd.in/eJUuUtTC well im telling you this is very old and far to be the magic that can change the offsec world!

I may be mistaken, but no one is sharing a direct link to what they’re claiming is a “magical KaliGPT” in their post!

So… am I missing something huge here, or what!!

So the question is: what triggered me to publish this? The answer is:

So what is this about?

Some people discussing this topic mentioned a link claiming to be the way to try “Kali GPT.” We won’t click on it for now; first, let’s do our own research.

A Google search returned the following:

When we click the first link which appears to be from chatgpt.com we get the following:

So, apparently, it’s just another GPT wrapper one of many that already exist! I could list numerous examples, as I mentioned in the LinkedIn post, including one I created a year ago: a small assistant I named Eddie.

Now, perhaps I’m wrong. Let’s talk with Kali GPT maybe we’ll get a surprise!

So I asked for a description, and I got this:

And then I asked who created it ?

As you can see, we have the creator’s information which is normal for anyone building a GPT wrapper and sharing it publicly. Now let’s check out the website mentioned in the image!

So ?

A small Dutch-based technology and AI consultancy. On their site they provide:

Custom AI & GPT solutions (e.g. Kali GPT for Kali Linux, LegalEagle for legal research)
Web & UX design, mobile-optimized sites, hosting and maintenance
E-commerce platforms, event booking systems, social-media integrations
Digital marketing services (SEO, newsletters, directory listings)
Graphic design and print-media services
CRM, LMS and document-management systems
Cloud solutions and IT security consulting
A client portal, an online shop of artistic visuals, even meditation & brain-training content

Their headquarters is in The Hague, Netherlands, and they’ve been operating since 2009, positioning themselves as a fusion of “imagination and intelligence” to deliver end-to-end digital solutions

Can you imagine that something called Kali GPT the “magical power” that’s supposed to revolutionize the entire offensive cybersecurity industry is being created by a company that isn’t even specialized in security, but in graphic design and print-media services?

I’m really confused. If this is truly something big, why haven’t OpenAI or OffSec made any announcement?

This is starting to smell fishy…

Let’s go back to Kali GPT and ask it for more:

So, as I expected, it’s just a custom GPT and nothing new anyone can make one!

For those who claim this version is “less restricted” and can supply pentesting payloads or other content that the standard GPT refuses, I’d say you simply need better prompt engineering.

One of the things that really confused me was when I saw this:

On the website we visited earlier, they present Kali GPT and state it’s “Powered by OpenAI.” Be careful, though that doesn’t mean OpenAI owns or controls it. You get the idea…

There’s nothing inherently wrong with the site or this custom GPT. Anyone can build and share their own, and that’s been true for the past two years people have created GPTs in countless fields, not just cybersecurity.

What’s unfortunate is that uninformed or non-technical users keep sharing these links on their feeds, grabbing the attention of newcomers and spreading hype without understanding what they’re promoting.

The last thing I want to show and prove is this: