recon-gyms

Name: recon-gyms
Availability: InStock
Author: entrovyx

Identify vulnerabilities in gym and fitness center scheduling and payment platforms.

3|1|Updated Jul 2, 2026

Search Tags:#reconnaissance #api-security #web-security #idor #offsec #fitness-tech

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-gyms-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: recon-gyms
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-gyms
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-gyms-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of identifying security vulnerabilities in niche fitness and health club websites, which often rely on specific third-party SaaS platforms and custom member portals.

Core Features & Use Cases

Platform Fingerprinting: Automatically identifies if a target uses Mindbody, Mariana Tek, ClubReady, or other common fitness scheduling software.
API & Portal Discovery: Probes for exposed booking APIs, member portals, and payment integration endpoints that are frequently misconfigured.
Use Case: A security researcher can use this to quickly map the attack surface of a boutique gym chain, identifying exposed class schedule APIs or insecure member registration flows.

Quick Start

Use the recon-gyms skill to perform platform fingerprinting and API discovery on the target domain example.com.

Frequently Asked Questions about recon-gyms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find vulnerabilities in gym scheduling and payment platforms?▼

You can find vulnerabilities in gym scheduling and payment platforms by performing sector-specific reconnaissance to fingerprint software like Mindbody, Mariana Tek, and ClubReady, probing for exposed booking APIs and insecure member portal authentication flows.

Does this reconnaissance tool work with Mindbody and Mariana Tek integrations?▼

Yes, this reconnaissance tool works with Mindbody, Mariana Tek, and ClubReady integrations by automatically fingerprinting the target fitness platform and probing for misconfigured API endpoints and exposed member registration flows.

How do I detect IDOR risks in fitness platform APIs?▼

To detect IDOR risks in fitness platform APIs, you probe exposed booking and payment endpoints, using jq to parse the API responses and identify misconfigurations in member portal authentication and data access controls.

What's the best way to map the attack surface of a boutique gym chain?▼

The best way to map the attack surface of a boutique gym chain is to run targeted reconnaissance that identifies the underlying fitness scheduling software and discovers exposed class schedule APIs and insecure member registration flows.

Do I need jq to parse API responses during fitness web security testing?▼

Yes, you need jq to parse API responses during fitness web security testing, as it is a required utility for analyzing the exposed booking and payment integration endpoints discovered during the reconnaissance process.