recon-carwashes
CommunityUncover security flaws in car wash and detailing websites
System Documentation
What problem does it solve?
This skill addresses the gap in generic reconnaissance workflows for car wash and auto detailing business websites, which are often small-to-medium operations running WordPress, membership portals, and booking systems that store sensitive customer PII and are frequently targeted by attackers.
Core Features & Use Cases
- Sector-specific domain discovery: Enumerates subdomains and endpoints common to car wash businesses, including membership portals, booking pages, and staging environments.
- Targeted vulnerability checks: Scans for exposed WordPress debug logs with customer PII, CORS misconfigurations on REST APIs, directory listing on photo galleries with EXIF data, and outdated booking plugin versions.
- Use case: For a pentest engagement targeting a regional car wash chain, use this skill to quickly identify exposed membership data, vulnerable third-party booking integrations, and unpatched WordPress plugins that could lead to customer data theft.
Quick Start
Use the recon-carwashes skill to perform full sector-specific reconnaissance on a target car wash company domain, including membership portal discovery, WordPress vulnerability checks, and booking system analysis.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: recon-carwashes Download link: https://github.com/uphiago/recon-skills/archive/main.zip#recon-carwashes Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.