Detect exposed minor PII and WordPress vulnerabilities in daycare websites.
npx skills add https://github.com/uphiago/recon-skills --skill recon-daycare
Please help me install this Agent Skill. Skill: recon-daycare Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-daycare Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-daycare
Daycare and childcare organization websites frequently operate with minimal security investment, storing highly sensitive minor PII (child names, parent contact details, medical info) on underprotected WordPress or custom PHP stacks, making them high-risk targets for unauthorized data access during authorized security assessments.
Use the recon-daycare skill to perform a complete authorized security assessment of the target daycare organization domain, including PII exposure checks and WordPress vulnerability scanning.
High-intent search queries and answers about installing and using this skill.
To scan for exposed child PII in daycare websites, you can run automated checks targeting exposed contact form submissions, enrollment records, and photo galleries. This process identifies sensitive minor and parent data left unprotected on undersecured servers.
Finding WordPress vulnerabilities on preschool websites involves scanning for common misconfigurations, unpatched plugins, CORS flaws, and XMLRPC issues. This targets the minimal security controls typically found on shared hosting environments used by daycares.
Locating daycare-related domains uses sector recon techniques like crt.sh queries and targeted Google dorks tailored to childcare naming conventions. This discovers preschool and early-education targets for authorized penetration testing engagements.
Yes, you can use automated reconnaissance to find exposed debug logs on childcare websites. The scanning process specifically targets these logs alongside enrollment PDFs to uncover sensitive minor data left exposed by custom PHP stacks.
Yes, you need explicit authorization to run security checks on early-education organization websites. This reconnaissance is designed strictly for authorized penetration testing engagements targeting daycare domains to identify exposed sensitive medical info and PII.
jassicsCoordinates passive and active enumeration of authorized attack surfaces for penetration testing.
uphiagoDetect and exploit CORS misconfigurations on WordPress REST API endpoints.
EntroVyxAutomate reconnaissance and vulnerability discovery for roofing company websites.
EntroVyxScan church websites for WordPress vulnerabilities and misconfigurations.
