Error Log Mining Skill

Discover and analyze exposed PHP error_log files for server paths, database errors, SQL fragments, API-key candidates, email addresses, and internal addresses. Collect a bounded sample and validate the sensitivity of its content instead of inferring impact from file size or status.

When to Use

• Running deep-invade Phase 2 on a high-value target.
• skill_view(name='source-leak-hunt') found an error_log file with HTTP 200.
• Target has PHP (WordPress, Laravel, custom PHP) with display_errors possibly enabled.
• You need server-side context (paths, DB structure) before attempting exploitation.

Prerequisites

• terminal with curl, grep, and python3.
• Target URL with potential error_log at common paths.
• Disk space: error logs can be multi-GB. Use curl -r for range requests on large files.