error-log-mining

Extract credentials, server paths, and database schemas from exposed PHP error logs.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill error-log-mining-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: error-log-mining
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/recon/error-log-mining
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill error-log-mining-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nmap, python3, masscan, subfinder, httpx, nuclei, and includes scripts (resource) components.

What problem does it solve?

This skill automates the discovery and analysis of exposed PHP error logs, which often contain sensitive information like database credentials, internal server paths, and API keys that are otherwise difficult to find manually.

Core Features & Use Cases

  • Automated Discovery: Probes common server paths for exposed error logs.
  • Intelligence Extraction: Parses logs for credentials, SQL queries, and internal infrastructure details.
  • Use Case: During a penetration test, use this skill to quickly scan a target for misconfigured WordPress debug logs to identify potential database access or internal path disclosures.

Quick Start

Use the error-log-mining skill to scan the target domain example.com and extract all sensitive intelligence found in its error logs.

Frequently Asked Questions about error-log-mining

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract database credentials from exposed PHP error logs?

You can extract database credentials from exposed PHP error logs by probing common server paths and applying regex processing to identify and validate leaked production secrets. This automates the discovery of sensitive authentication details and infrastructure configurations.

What is the best way to find leaked API keys in WordPress debug logs?

The best way to find leaked API keys in WordPress debug logs is to use automated intelligence extraction that parses the logs for credentials, SQL queries, and internal infrastructure details. It probes common server paths to locate and analyze misconfigured debug files.

Can I scan a target domain for exposed server paths during a penetration test?

Yes, you can scan a target domain for exposed server paths during a penetration test. The process applies to reconnaissance and vulnerability assessment phases of offensive security operations by probing the target for misconfigured logs and path disclosures.

Do I need curl and python3 to perform error log data mining?

Yes, you need curl and python3 to perform error log data mining. These dependencies are required to probe target domains for exposed error logs and apply standard regex processing to identify and validate leaked production secrets.

What sensitive information is typically found in misconfigured PHP error logs?

Sensitive information typically found in misconfigured PHP error logs includes database credentials, internal server paths, API keys, and SQL queries. This data provides valuable intelligence for vulnerability assessment during offensive security operations.