skills.rest
uphiago
uphiagoCOMMUNITY
Explore all skills by this author →
Website𝕏@uphiagoGitHub

recon-gyms

Fingerprint gym platforms and enumerate booking APIs for security vulnerabilities.

1.1k|191|Updated Jun 24, 2026
Search Tags:#gym recon#fitness pentest#mindbody api#booking api security#member portal testing#payment integration recon#sector-specific pentest
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill recon-gyms
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-gyms
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-gyms
Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-gyms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Generic reconnaissance tools miss sector-specific vulnerabilities in gym and fitness center websites, which commonly use specialized booking platforms and member portals with unique security gaps that are frequently exploited in real-world engagements.

Core Features & Use Cases

  • Sector Platform Fingerprinting: Identifies common gym SaaS platforms (Mindbody, Mariana Tek, ClubReady) and underlying content management systems (WordPress, custom PHP, Wix, Squarespace).
  • Booking & API Recon: Discovers exposed class schedule, booking, and member APIs that often leak personally identifiable information or allow insecure direct object reference (IDOR) attacks.
  • Payment & Portal Testing: Checks for misconfigured payment integrations and unauthenticated access to member portals and profile endpoints.
  • Use Case: For example, during a pentest of a boutique fitness studio, this skill can locate hardcoded Mindbody API keys in JavaScript bundles or unauthenticated endpoints that expose member check-in history and personal details.

Quick Start

Use the recon-gyms skill to perform full sector-specific reconnaissance on the target gym website and identify all exploitable booking, portal, and payment vulnerabilities.

Frequently Asked Questions about recon-gyms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities in gym and fitness center websites?▼

Gym website security vulnerabilities are identified by performing sector-specific reconnaissance targeting booking platforms and member portals to expose misconfigurations and insecure APIs.

How do I test Mindbody and ClubReady booking APIs for exposed member data?▼

Booking API enumeration tests Mindbody and ClubReady endpoints to discover exposed class schedules and member data, detecting insecure direct object reference attacks and leaked personally identifiable information.

What is the best way to detect hardcoded API keys in fitness studio web applications?▼

Hardcoded Mindbody API keys in fitness studio web applications are detected through platform fingerprinting and JavaScript bundle analysis to locate exposed credentials and unauthenticated endpoints.

Does generic reconnaissance work for testing custom WordPress gym member portals?▼

Generic reconnaissance overlooks custom WordPress gym member portals, requiring sector-specific testing to identify payment integration misconfigurations and unauthenticated access to profile endpoints.

Can I check for unauthenticated access to gym member check-in history?▼

Unauthenticated member portal access testing checks for exposed profile endpoints and check-in history, discovering insecure direct object reference vulnerabilities in fitness center web assets.

Why does payment integration testing matter for boutique fitness studios?▼

Payment integration testing matters for boutique fitness studios because misconfigured payment endpoints and exposed scheduling APIs often leak sensitive member data and allow unauthorized access.

Related Skills

Explore More Software Engineering Skills→
Prohao42Prohao42
120

recon-and-methodology

Map assets, enumerate endpoints, and fingerprint technologies for target reconnaissance.

Community
Advanced
EntroVyxEntroVyx
3

recon-gyms

Identify vulnerabilities in gym and fitness center scheduling and payment platforms.

Community
Intermediate
adityaarsharmaadityaarsharma
2

orbit-sec-secrets-leak

Detect hardcoded secrets in WordPress plugins and git history.

Community
Advanced
EntroVyxEntroVyx
3

recon-cafes

Probe coffee shop websites for exposed POS APIs and IDOR vulnerabilities.

Community
Intermediate