skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

recon-hvac

Automate HTTP enumeration to identify vulnerabilities in HVAC service company websites.

3|1|Updated Jul 2, 2026
Search Tags:#vulnerability#enumeration#wordpress#pii#hvac#recon
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-hvac-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-hvac
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-hvac
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-hvac-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of security vulnerabilities specific to HVAC service company websites, which are often built using standardized, insecure templates by local agencies.

Core Features & Use Cases

  • Sector-Specific Recon: Identifies common HVAC web infrastructure including emergency booking portals, maintenance plan pages, and smart thermostat integrations.
  • Vulnerability Identification: Detects exposed debug logs, directory listings, and CORS misconfigurations that frequently leak customer PII.
  • Use Case: Quickly audit a list of HVAC company domains to identify exposed maintenance plan portals or debug logs containing sensitive customer data.

Quick Start

Use the recon-hvac skill to perform a full security audit on the target domain example-hvac.com.

Frequently Asked Questions about recon-hvac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan HVAC company websites for exposed customer PII?▼

Scan HVAC websites for PII by automating HTTP enumeration to detect exposed debug logs, directory listings, and insecure maintenance plan portals. This targets standardized templates that frequently leak sensitive customer data through service booking endpoints.

What common vulnerabilities affect WordPress deployments for HVAC service portals?▼

Common vulnerabilities in HVAC WordPress deployments include exposed debug logs, open directory listings, and CORS misconfigurations. These insecure template defaults frequently expose emergency service endpoints and customer maintenance plan data.

Can I automate HTTP enumeration across multiple HVAC domains using curl?▼

Automate HTTP enumeration across HVAC domains using standard shell utilities and curl to perform vulnerability discovery. This enables rapid sector-specific auditing of WordPress service portals without requiring specialized testing frameworks.

Does this reconnaissance target smart thermostat integrations and emergency booking endpoints?▼

Reconnaissance specifically targets smart thermostat integrations, emergency service endpoints, and maintenance plan portals. It automates discovery of these HVAC-specific infrastructure components to identify common WordPress deployment vulnerabilities.

What is the best way to audit a list of HVAC domains for directory listing exposures?▼

Audit HVAC domains for directory listings by automating sector-specific reconnaissance across target lists. This identifies exposed debug logs and PII-heavy directories that frequently leak through insecure WordPress templates built by local agencies.

Related Skills

Explore More Education & Research Skills→
EntroVyxEntroVyx
3

recon-laundromats

Probe laundromat websites for security misconfigurations and exposed data.

Community
Intermediate
uphiagouphiago
1.1k

recon-daycare

Detect exposed minor PII and WordPress vulnerabilities in daycare websites.

Community
Intermediate
uphiagouphiago
1.1k

recon-landscaping

Enumerate landscaping domains and scan WordPress sites for common vulnerabilities.

Community
Intermediate
EntroVyxEntroVyx
3

recon-tree-services

Automate reconnaissance and vulnerability discovery for tree service websites.

Community
Intermediate