recon-dentists

Automates WordPress-based dental website vulnerability discovery including PHI exposure risks.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-dentists-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-dentists
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-dentists
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-dentists-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, python3.

What problem does it solve?

This skill automates the identification of security vulnerabilities in dental and orthodontic practice websites, which often handle sensitive patient health information (PHI) with inadequate security controls.

Core Features & Use Cases

  • Sector-Specific Discovery: Identifies dental practice domains and subdomains using specialized search patterns and certificate transparency logs.
  • Vulnerability Assessment: Scans for common misconfigurations like exposed debug logs, weak WordPress REST API permissions, and outdated booking plugins.
  • Use Case: A security researcher can use this to quickly map the attack surface of a dental clinic's online presence, identifying potential PHI leaks or RCE vectors in booking systems like Dentrix Ascend or PatientConnect.

Quick Start

Run the recon-dentists skill against the target domain example-dental-practice.com to perform a full security assessment of its CMS and booking infrastructure.

Frequently Asked Questions about recon-dentists

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan dental practice websites for PHI exposure and WordPress vulnerabilities?

Security reconnaissance for dental practice websites automates domain discovery, CMS fingerprinting, and vulnerability assessment to identify PHI exposure, misconfigurations, and outdated booking plugin vulnerabilities. It targets platforms like WordPress and practice management systems to map potential attack surfaces.

What common security misconfigurations affect dental clinic booking systems and patient portals?

Dental clinic booking systems often expose sensitive patient health information through weak WordPress REST API permissions, exposed debug logs, and outdated plugins. Vulnerability scanning identifies these specific misconfigurations alongside potential RCE vectors in practice management platforms.

Can I use curl and python3 to identify outdated WordPress plugins on healthcare domains?

Yes, standard network utilities like curl, jq, and python3 perform HTTP requests and parse responses to fingerprint CMS installations and detect outdated plugin vulnerabilities on healthcare domains, automating the identification of exposed debug logs and weak API permissions.

What's the best way to discover subdomains and certificate transparency logs for orthodontic practice security assessments?

Targeted security reconnaissance uses specialized search patterns and certificate transparency logs to discover dental and orthodontic practice domains and subdomains, mapping the full online attack surface before deeper vulnerability scanning of booking infrastructure and CMS configurations.

Does this dental website recon tool require specialized penetration testing software?

No specialized penetration testing software is required. The tool relies on standard network utilities and HTTP request tools—specifically curl, jq, and python3—to perform domain discovery, CMS fingerprinting, and configuration exposure analysis on dental practice targets.