skills.rest
uphiago
uphiagoCOMMUNITY
Explore all skills by this author →
Website𝕏@uphiagoGitHub

recon-landscaping

Enumerate landscaping domains and scan WordPress sites for common vulnerabilities.

1.1k|191|Updated Jun 24, 2026
Search Tags:#cors misconfiguration#wordpress pentest#sector reconnaissance#landscaping recon#shared hosting vulnerabilities#exif data leak#booking plugin security
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill recon-landscaping
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-landscaping
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-landscaping
Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-landscaping

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the problem of efficiently identifying common, high-impact security vulnerabilities in landscaping company websites, which are frequently built on under-secured WordPress-on-shared-hosting stacks and often overlooked in standard reconnaissance workflows.

Core Features & Use Cases

  • Sector-specific target discovery: Enumerate landscaping company domains via crt.sh using common industry naming conventions for lawn care, tree service, and related businesses.
  • Common vulnerability scanning: Detect exposed WordPress debug logs, directory listing on photo galleries with EXIF data leaks, CORS misconfigurations, and vulnerable booking/estimation plugins.
  • Use case: A penetration tester scoping a landscaping company target can use this skill to quickly surface exposed customer PII in debug logs, geolocation data in gallery EXIF files, and vulnerable booking webhook endpoints without performing manual, repetitive checks across dozens of similar targets.

Quick Start

Use the recon-landscaping skill to perform full sector-specific reconnaissance on the target landscaping company domain and surface all common associated vulnerabilities.

Frequently Asked Questions about recon-landscaping

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find vulnerabilities in WordPress sites for landscaping companies?▼

Finding vulnerabilities in landscaping company WordPress sites requires sector-specific reconnaissance covering domain discovery, plugin scanning, and photo EXIF analysis to detect exposed debug logs, directory listings, and CORS misconfigurations.

What common security issues affect landscaping business websites on shared hosting?▼

Landscaping business websites on shared hosting commonly suffer from exposed WordPress debug logs, directory listing on photo galleries causing EXIF data leaks, CORS misconfigurations, and vulnerable booking plugin endpoints.

How do I enumerate landscaping company domains for pentest reconnaissance?▼

Enumerate landscaping company domains for pentest reconnaissance by querying crt.sh using common industry naming conventions for lawn care, tree service, irrigation, and hardscaping businesses to discover target assets.

Can I detect exposed customer PII in debug logs during a WordPress pentest?▼

You can detect exposed customer PII in WordPress debug logs during a pentest by scanning for exposed debug log files on under-secured WordPress-on-shared-hosting stacks commonly used by landscaping businesses.

Does this recon approach work for tree service and irrigation business domains?▼

This recon approach works for tree service and irrigation business domains by applying common industry naming conventions to enumerate targets and detect high-impact vulnerabilities in their WordPress-on-shared-hosting stacks.

Why do photo galleries on landscaping websites leak EXIF data?▼

Photo galleries on landscaping websites leak EXIF data when directory listing is enabled on under-secured shared hosting, exposing geolocation metadata in gallery image files without proper access controls.

Related Skills

Explore More Software Engineering Skills→
uphiagouphiago
1.1k

sector-recon-methodology

Identify non-regulated sectors with high WordPress vulnerability rates from field data.

Community
Intermediate
uphiagouphiago
1.1k

recon-carwashes

Identify sector-specific security vulnerabilities in car wash business websites.

Community
Intermediate
EntroVyxEntroVyx
3

recon-smb-services

Scan WordPress and shared hosting sites for security misconfigurations and PII exposure.

Community
Intermediate
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced