recon-breweries

What problem does it solve?

This skill fills a gap in generic web reconnaissance workflows by providing sector-specific checks for craft breweries, brewpubs, distilleries, and similar beverage businesses, which often have unique technology stacks and common misconfigurations that standard recon misses, leading to overlooked high-impact vulnerabilities like exposed customer data or bypassed age verification.

Core Features & Use Cases

• Sector-specific platform fingerprinting: Identifies common CMS and e-commerce platforms used by craft beverage businesses including WordPress/WooCommerce, Shopify, Untappd, Toast POS, and BeerMenus.
• Age-gate bypass testing: Checks for trivially bypassable client-side age verification that exposes underlying e-commerce stores and sensitive content.
• Exposed API and endpoint discovery: Probes for unauthenticated access to menu APIs, WooCommerce REST endpoints, Untappd integration keys, and public event calendar submission forms.
• Use case: Use during authorized penetration tests of craft brewery targets to quickly identify high-impact, sector-specific attack surfaces that generic web recon would fail to catch.

Quick Start

Use the recon-breweries skill to run a full sector-specific reconnaissance scan on a craft brewery target, including age-gate bypass checks, platform fingerprinting, and exposed API probing.