skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

recon-landscaping

Enumerate WordPress landscaping sites for misconfigurations and vulnerable plugins.

3|1|Updated Jul 2, 2026
Search Tags:#vulnerability#reconnaissance#web-security#enumeration#wordpress#landscaping
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-landscaping-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-landscaping
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-landscaping
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-landscaping-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of vulnerabilities specific to landscaping and small business websites, which often lack professional security hardening and rely on outdated WordPress plugins.

Core Features & Use Cases

  • Sector-Specific Recon: Identifies common landscaping site structures like photo galleries, booking tools, and seasonal service pages.
  • Vulnerability Identification: Detects directory listings, exposed debug logs, and vulnerable booking plugins that are prevalent in this niche.
  • Use Case: Quickly audit a list of local landscaping company domains to find exposed EXIF data in photo galleries or misconfigured booking webhooks that could lead to SSRF.

Quick Start

Run the recon-landscaping skill against the target domain provided in the current session to identify potential WordPress vulnerabilities and exposed sensitive files.

Frequently Asked Questions about recon-landscaping

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan landscaping websites for WordPress plugin vulnerabilities?▼

Scanning landscaping websites for WordPress plugin vulnerabilities involves automated curl-based enumeration to detect outdated plugin versions, directory listings, and exposed debug logs prevalent in small business sites.

What security misconfigurations are common in landscaping business websites?▼

Common security misconfigurations in landscaping business websites include directory listings, CORS issues, exposed debug logs, and vulnerable WordPress booking plugins or photo galleries that lack professional hardening.

How do I detect exposed EXIF data in photo galleries on small business sites?▼

Detecting exposed EXIF data in photo galleries on small business sites requires sector-specific reconnaissance targeting common WordPress gallery structures to identify unsecured file uploads and metadata exposure.

Can I audit multiple local landscaping domains for misconfigured booking webhooks?▼

You can audit multiple local landscaping domains to find misconfigured booking webhooks that could lead to SSRF by running automated enumeration against their WordPress-based infrastructure and seasonal service pages.

Does this reconnaissance tool require dependencies to scan for CORS issues?▼

This reconnaissance tool requires no dependencies to scan for CORS issues, utilizing built-in curl-based enumeration to identify security misconfigurations and outdated plugin versions on target domains.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

recon-laundromats

Probe laundromat websites for security misconfigurations and exposed data.

Community
Intermediate
wgpsecwgpsec
1.6k

report-generate

Generate structured penetration testing reports with CVSS risk ratings and remediation guidance.

Official
Intermediate
EntroVyxEntroVyx
3

recon-fire-restoration

Automate security reconnaissance of WordPress restoration sites to detect PII leaks and misconfigurations.

Community
Intermediate
EntroVyxEntroVyx
3

recon-tree-services

Automate reconnaissance and vulnerability discovery for tree service websites.

Community
Intermediate