recon-fire-restoration

What problem does it solve?

This skill addresses the challenge of conducting targeted reconnaissance on fire damage, water damage, mold remediation, and disaster cleanup company websites, which frequently handle sensitive customer personally identifiable information (PII) including property addresses, insurance claim details, and damage photos via emergency intake forms, making them high-value targets for security assessment.

Core Features & Use Cases

• Sector-specific domain discovery: Uses tailored Google dorks and certificate transparency log queries to locate restoration company web assets, including franchise locations and independent contractor sites.
• CMS and configuration auditing: Checks for common WordPress deployments, exposed debug logs containing intake form PII, sensitive configuration files, and outdated page builder plugins.
• Attack chain mapping: Identifies high-impact vulnerability chains specific to the restoration sector, including CORS credential reflection, photo gallery EXIF data leaks, and franchise portal IDOR vulnerabilities. Use case: A penetration tester scoping a Servpro franchise engagement can use this skill to quickly map the target's attack surface, locate exposed customer data, and prioritize remediation for sector-specific weaknesses.

Quick Start

Use the recon-fire-restoration skill to perform targeted reconnaissance on a fire damage restoration company website and identify exposed customer PII and common vulnerability chains.