recon-daycare

What problem does it solve?

Daycare and childcare organization websites frequently operate with minimal security investment, storing highly sensitive minor PII (child names, parent contact details, medical info) on underprotected WordPress or custom PHP stacks, making them high-risk targets for unauthorized data access during authorized security assessments.

Core Features & Use Cases

• Sector-specific domain discovery: Identifies daycare-related domains using common naming conventions, crt.sh queries, and targeted Google dorks tailored to the childcare sector.
• Prioritized PII exposure checks: Scans for exposed contact form submissions, enrollment records, photo galleries, and debug logs containing sensitive minor and parent data.
• WordPress-focused recon and vulnerability scanning: Detects common WordPress misconfigurations, unpatched plugins, CORS flaws, and XMLRPC vulnerabilities prevalent on daycare sites.
• Use case: For a penetration test of a local preschool's web assets, use this skill to quickly locate exposed enrollment PDFs with child PII and unpatched WordPress plugins that could lead to full site compromise.

Quick Start

Use the recon-daycare skill to perform a complete authorized security assessment of the target daycare organization domain, including PII exposure checks and WordPress vulnerability scanning.