recon-bakeries

Fingerprint bakery e-commerce platforms and probe exposed ordering APIs.

1.1k|191|Updated Jun 24, 2026
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill recon-bakeries
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-bakeries
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-bakeries
Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-bakeries

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the problem of identifying overlooked security vulnerabilities in small bakery, pastry, and cake shop websites that typically run basic e-commerce setups on shared hosting, which often have unpatched flaws in their ordering systems, APIs, and custom form fields that generic recon guides miss.

Core Features & Use Cases

  • Sector-specific platform fingerprinting: Detects common bakery site platforms including WordPress/WooCommerce, Shopify, and third-party ordering tools like EatStreet, Toast POS, and Slice.
  • Targeted vulnerability surface mapping: Identifies exposed WooCommerce REST APIs, unvalidated custom cake order forms, brute-forceable coupon validation endpoints, and leaking store locator APIs that expose customer and staff data.
  • Use case: A penetration tester scoping a local bakery chain's web assets can use this skill to quickly find exposed customer order data and unsecured checkout flows without sifting through generic e-commerce recon guides.

Quick Start

Use the recon-bakeries skill to scan a target bakery website for exposed e-commerce APIs, unvalidated custom order forms, and leaking store locator data.

Frequently Asked Questions about recon-bakeries

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find vulnerabilities in WooCommerce REST APIs for small bakery websites?

You can find vulnerabilities in WooCommerce bakery websites by conducting sector-specific platform fingerprinting, probing exposed WooCommerce REST APIs, testing custom cake order forms for injection flaws, and detecting store locator data leakage.

What is store locator data leakage and how does it affect bakery e-commerce sites?

Store locator data leakage exposes sensitive customer and staff data through unprotected store locator APIs on bakery websites. Sector-specific reconnaissance identifies these leaking endpoints during attack surface enumeration.

Can I test custom order forms for injection vulnerabilities on food service domains?

Yes, you can test custom order forms for injection vulnerabilities on food service domains by probing unvalidated form fields commonly found in small bakery e-commerce setups running on shared hosting.

Does this recon approach work with third-party ordering systems like Toast POS and EatStreet?

Yes, this recon approach works with third-party ordering systems like Toast POS and EatStreet. It applies to penetration testing tasks targeting small food service business domains using these specific integrations alongside WordPress or Shopify.

What is the best way to enumerate the attack surface of a local pastry shop website?

The best way to enumerate a pastry shop website's attack surface is scanning for exposed e-commerce APIs, brute-forceable coupon validation endpoints, and unvalidated custom order forms, using targeted sector fingerprinting instead of generic recon.