Mine exposed PHP error logs for credentials, API keys, and server paths.
npx skills add https://github.com/uphiago/recon-skills --skill error-log-mining
Please help me install this Agent Skill. Skill: error-log-mining Source: https://github.com/uphiago/recon-skills/tree/main/recon/error-log-mining Command: npx skills add https://github.com/uphiago/recon-skills --skill error-log-mining
Exposed PHP error logs on misconfigured WordPress, Laravel, or custom PHP sites routinely leak sensitive server data including database credentials, API keys, SQL queries, and full directory paths that are otherwise inaccessible during standard reconnaissance.
Use the error-log-mining skill to scan your target WordPress site for exposed error logs and extract all available database credentials, API keys, and server paths from any discovered log files.
High-intent search queries and answers about installing and using this skill.
This skill automates WordPress and Laravel reconnaissance by scanning 11 common server paths for exposed error_log files, applying content validation to filter out false positives from custom 404 pages or SPAs, and extracting high-value intelligence like server paths and database credentials.
Yes, this skill supports extracting data from large PHP error logs using size-aware download handling. It safely processes multi-GB exposed error_log files to extract server paths, SQL queries, and API keys even from misconfigured servers with display_errors enabled.
Error log mining works for WordPress, Laravel, and custom PHP applications. The skill applies regex-based pattern matching to any accessible PHP error_log file to extract directory paths, email addresses, and installed plugin or theme names.
You can mine database credentials, API keys, SQL queries, WordPress salts, server paths, internal IPs, email addresses, and installed plugin or theme names from exposed PHP error logs. This extracted intelligence maps server structure and identifies potential attack vectors during security assessments.
This skill discovers accessible error log files by checking 11 common paths on the target web server. It applies content validation to ensure discovered files contain genuine PHP error data rather than false positives from SPAs or custom 404 pages.
uphiagoScan web servers for exposed sensitive files and hidden endpoints.
zebbernDetect and exploit SQL injection vulnerabilities in web applications.
RooseveltAdvisorsAutomate network reconnaissance for domains, IPs, and netblocks.
parcadeiSearch and refactor code by AST structural pattern matching across multi-language codebases.
