recon-carpet-cleaning

Identifies sector-specific security vulnerabilities in carpet cleaning and water restoration websites during authorized offensive assessments.

1.1k|191|Updated Jun 24, 2026
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill recon-carpet-cleaning
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-carpet-cleaning
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-carpet-cleaning
Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-carpet-cleaning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of identifying unique, often overlooked security vulnerabilities in small carpet cleaning, rug cleaning, upholstery cleaning, and water damage restoration company websites, which frequently have weak security postures due to rushed emergency service builds, reused local agency templates, and unsecured photo galleries containing sensitive customer data.

Core Features & Use Cases

  • Sector-Specific Attack Surface Discovery: Automatically maps common endpoints unique to carpet cleaning and water damage service sites, including emergency service pages, booking forms, before/after photo galleries, and promotional coupon pages.
  • Prevalent Vulnerability Detection: Scans for common flaws in this vertical such as exposed WordPress debug logs with customer PII, EXIF GPS metadata leaks in gallery photos, CORS misconfigurations, and unpatched widely used WordPress plugins.
  • Real-World Use Case: During an authorized penetration test of a local carpet cleaning company, use this Skill to quickly locate exposed customer data in debug logs and unsecured gallery plugins that leak home GPS coordinates of clients.

Quick Start

Use the recon-carpet-cleaning skill to perform a full sector-specific reconnaissance scan of a target carpet cleaning company domain to identify common vulnerabilities including exposed debug logs, EXIF metadata leaks, and unpatched WordPress plugins.

Frequently Asked Questions about recon-carpet-cleaning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find WordPress vulnerabilities in carpet cleaning service websites?

To find WordPress vulnerabilities in carpet cleaning service websites, you can perform a sector-specific reconnaissance scan that targets prevalent misconfigurations, unpatched plugins, and exposed debug logs common to this vertical. This workflow maps emergency service endpoints, booking forms, and photo galleries to identify customer PII leaks and WordPress plugin flaws.

What security flaws are common in carpet cleaning and water damage restoration sites?

Common security flaws in carpet cleaning and water damage restoration sites include exposed WordPress debug logs containing customer PII, EXIF GPS metadata leaks in photo galleries, CORS misconfigurations, and unpatched WordPress plugins. These vulnerabilities often stem from rushed emergency service builds and reused local agency templates.

How do I detect EXIF metadata leaks in service provider photo galleries?

You detect EXIF metadata leaks in service provider photo galleries by scanning before and after photo heavy endpoints unique to the carpet cleaning vertical. This process identifies unsecured gallery plugins and image uploads that inadvertently expose sensitive client data such as home GPS coordinates.

Can I scan for CORS misconfigurations on small business service sites?

Yes, you can scan for CORS misconfigurations on small business service sites during an authorized penetration test. The reconnaissance workflow targets prevalent WordPress misconfigurations found in carpet cleaning and water damage restoration companies, identifying flawed access controls across rushed emergency service builds.

What is the best way to perform reconnaissance on local carpet cleaning company domains?

The best way to perform reconnaissance on local carpet cleaning company domains is using a targeted workflow that maps sector specific attack surfaces like promotional coupon pages and booking forms. This approach identifies common vulnerabilities including exposed debug logs and unpatched WordPress plugins unique to this vertical.

Does this reconnaissance workflow work for upholstery cleaning and rug cleaning businesses?

Yes, this reconnaissance workflow works for upholstery cleaning and rug cleaning businesses. It is specifically designed for penetration testing SMB service providers across the carpet cleaning, rug cleaning, upholstery cleaning, and water damage restoration verticals, accounting for agency template reuse and weak security postures.