Map sector-specific vulnerabilities in coffee shop websites using common POS platforms.
npx skills add https://github.com/uphiago/recon-skills --skill recon-cafes
Please help me install this Agent Skill. Skill: recon-cafes Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-cafes Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-cafes
Coffee shop, cafe, and tea house websites frequently have unpatched vulnerabilities in their online ordering systems, loyalty programs, and third-party point-of-sale integrations that attackers can exploit to steal payment data, manipulate rewards, or access customer information, and most generic recon tools do not account for the unique tech stacks and common misconfigurations of these small food service businesses.
Use the recon-cafes skill to perform a full sector-specific recon of a target coffee shop website, identify its point-of-sale platform, probe for exposed ordering and loyalty endpoints, and test for common cafe-specific vulnerabilities like API key exposure and points manipulation.
High-intent search queries and answers about installing and using this skill.
To find exposed POS API keys in a coffee shop website, you analyze frontend JavaScript bundles for hidden credentials. This skill automates extraction to locate exposed Toast POS or Square Online integrations during reconnaissance.
Cafe website vulnerability surface mapping identifies exposed online ordering APIs, loyalty endpoints, and store locator data leaks. It probes common food service tech stacks like ChowNow and Olo to prioritize high-risk integration testing.
Testing for loyalty points manipulation involves probing rewards endpoints for IDOR and balance enumeration vulnerabilities. This skill validates common attack vectors against the target's specific ordering platform without requiring custom scripts.
Yes, you can use this for pentesting multi-location franchise coffee shop sites. It maps sector-specific vulnerabilities across franchise sites using platforms like Toast POS, Square Online, ChowNow, and Olo integrations.
Yes, it identifies vulnerabilities in WordPress sites using Toast POS by fingerprinting the tech stack. It probes for menu item IDOR, exposed API keys, and unrestricted Google Maps API keys specific to these integrations.
Generic recon tools often fail to account for the unique tech stacks and misconfigurations of small food service businesses. They lack features for platform fingerprinting and testing specific attack vectors like gift card balance enumeration on cafe sites.
jcastillotxExecute a complete penetration testing lifecycle from reconnaissance to reporting.
mahamaneharouna9-cpuIdentify and test web application vulnerabilities including OWASP Top 10 risks.
EntroVyxProbe coffee shop websites for exposed POS APIs and IDOR vulnerabilities.
pdparchitectFingerprint target infrastructure and load context-specific security attack modules.
