Stats
Actions
Tags
From cybersecurity-skills
Parses Apache and Nginx access logs to detect SQL injection, LFI, XSS, scanner fingerprints, and brute-force patterns using regex, GeoIP enrichment, and anomaly detection.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills:analyzing-web-server-logs-for-intrusionThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
- When investigating security incidents that require analyzing web server logs for intrusion
pip install geoip2 user-agentsUNION SELECT, OR 1=1, ' OR ', hex encoding patterns../, /etc/passwd, /proc/self, php://filter<script>, javascript:, onerror=, onload=python scripts/agent.py --log-file /var/log/nginx/access.log --geoip-db GeoLite2-City.mmdb --output web_intrusion_report.json
192.168.1.100 - - [15/Jan/2024:10:30:45 +0000] "GET /products?id=1' UNION SELECT username,password FROM users-- HTTP/1.1" 200 4532
Nikto/2.1.6, sqlmap/1.7, DirBuster-1.0-RC1, gobuster/3.1.0
npx claudepluginhub mukul975/anthropic-cybersecurity-skills --plugin cybersecurity-skillsParses Apache and Nginx access logs to detect SQL injection, LFI, directory traversal, web scanners, and brute-force attacks using regex on OWASP signatures, GeoIP enrichment, and request anomaly detection.
Parses Apache and Nginx access logs to detect SQL injection, LFI, directory traversal, web scanners, and brute-force attacks using regex on OWASP signatures, GeoIP enrichment, and request anomaly detection.
Parses Apache and Nginx access logs to detect SQL injection, LFI, directory traversal, scanner fingerprints, and brute-force patterns using regex, GeoIP enrichment, and anomaly detection.