How to Use ShellGPT in Kali Linux: Install, Examples and Safe Practice

Key takeaways

• ShellGPT (sgpt) is a thin client for an LLM API. It needs an API key and an internet connection.
• On current Kali, use pipx to avoid Python's externally-managed-environment error.
• Treat every generated command as untrusted until you understand it.
• Do not paste target data, credentials or client details into a third-party API.

What ShellGPT is

ShellGPT is an open-source command-line tool, installed as the sgpt command, that sends your prompt to a language model API and shows the reply in the terminal. It can also suggest a shell command and, if you confirm, run it. It does not understand your system. It writes plausible text, and the quality depends on your question and the model behind it. The project is on GitHub, where the current install steps and options are documented; check there because they change.

Where it helps in a learning lab

• Reminding you of command syntax you rarely use.
• Explaining what an unfamiliar command or flag does.
• Drafting small shell or Python snippets that you then read and test.

It is a note-taker's helper, not a testing tool. It does not perform scans or exploits by itself, and it does not replace knowing Nmap, Wireshark or Linux fundamentals.

Install on Kali

Recent Kali releases follow Python's rule that system-wide pip install is blocked ("externally-managed-environment"). Use pipx, which gives each tool its own environment.

sudo apt update
sudo apt install pipx
pipx ensurepath
pipx install shell-gpt
sgpt --version

Open a new terminal after pipx ensurepath so your PATH updates. If sgpt is not found, that is the usual cause. The Kali documentation covers package management basics.

Set an API key

ShellGPT needs an API key from the provider it talks to. Create one in your provider account, then supply it when ShellGPT asks on first run, or set it as an environment variable as the project README describes. Keep the key out of shell history and public repositories. API usage may cost money, so check your provider's pricing and set a spending limit.

Basic use

sgpt "explain what the nmap -sV flag does"
sgpt --shell "list the 10 largest files in this directory"
sgpt --code "python function that reads a text file and counts words"

In shell mode, ShellGPT shows the command and asks whether to execute, describe or abort. Choose describe if you do not understand it. Flags differ by version, so run sgpt --help.

Safe practice

1. Read before you run. A wrong or destructive command, such as a bad rm or a scan of the wrong range, runs with your privileges.
2. Stay in scope. In any testing exercise, only act on targets you are authorised to test, such as your own lab VMs. A suggestion from a chatbot is not authorisation.
3. Do not leak data. Prompts go to a third party. Never include client names, IP ranges, credentials, internal hostnames or captured data.
4. Verify against documentation. Confirm flags in the man page or official docs. The Nmap reference guide is the authority for Nmap.
5. Do not rely on it in exams. Proctored certification exams generally do not allow outside tools. Check the rules for your exam.

Where this fits with CEH

CEH v13 is branded "CEH v13 AI" because the course includes AI-assisted security topics. Tools like ShellGPT illustrate one such use: speeding up routine command-line work. The exam and the CEH Practical test your own understanding, so use ShellGPT to learn commands, then practise without it. See the EC-Council CEH page for the current exam details.

Troubleshooting

Next steps

Read the overview of why hackers use ShellGPT in Kali and the guide to command-line shells in Kali. For structured training, see the CEH v13 AI course.

Related reading

• A Step-by-Step Guide to Webcam Exploitation in a Lab Setup
• Ansible for Cybersecurity | Automating Security Tool Installation and Scans