Performs targeted reconnaissance of HVAC company websites for sector-specific vulnerabilities.
npx skills add https://github.com/uphiago/recon-skills --skill recon-hvac
Please help me install this Agent Skill. Skill: recon-hvac Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-hvac Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-hvac
HVAC company websites are frequently built by local agencies using cookie-cutter WordPress configurations, have urgent emergency booking features with lax security validation, and store sensitive customer PII in maintenance plan portals and form uploads, making them high-value targets that require tailored recon techniques to identify common, sector-specific vulnerabilities that generic recon workflows miss.
Use the recon-hvac skill to perform a full sector-specific recon of the target HVAC company domain, including domain discovery, WordPress configuration checks, and feature-specific vulnerability scanning for common HVAC site assets.
High-intent search queries and answers about installing and using this skill.
To find HVAC website vulnerabilities, perform targeted reconnaissance for sector-specific weaknesses like exposed WordPress debug logs, unauthenticated maintenance plan portals, and emergency booking form validation flaws. This tailored approach identifies exposed customer PII that generic web enumeration tools often miss.
Generic web recon misses exposures on agency-built WordPress sites because it lacks checks for cookie-cutter plugin configurations and sector-specific features. Tailored scanning is required to detect common HVAC assets, such as smart thermostat integrations and exposed service invoice directory listings.
The best way to scan HVAC maintenance plan portals for unauthenticated data access is using feature-focused vulnerability checks designed for sector assets. This specialized testing identifies exposed customer PII and API keys in maintenance portals that generic scanning workflows overlook.
You can use sector-specific recon for red team engagements targeting smart thermostat integrations by applying specialized scans for HVAC features. This process identifies exposed API keys and unauthenticated data endpoints within smart thermostat configurations commonly found on HVAC service provider websites.
To run a full security assessment of an HVAC domain, execute targeted reconnaissance covering domain discovery, WordPress configuration checks, and vulnerability scanning for features like emergency booking forms. This uncovers exposed sensitive customer data across all associated web assets.
Testing emergency booking forms on HVAC websites is limited by the need for tailored recon workflows that account for agency-built configuration patterns. Generic vulnerability scanning may produce false negatives if it does not account for the unique technical stack and lax security validation of urgent booking features.
DavidKkResolve hostnames to A and AAAA DNS records via a GET API.
uphiagoIdentify pool service website vulnerabilities via domain and WordPress enumeration.
EntroVyxAutomate HTTP enumeration to identify vulnerabilities in HVAC service company websites.
uphiagoEnumerate roofing company domains, WordPress assets, and insurance claim endpoints.
