recon-landscaping

Name: recon-landscaping
Availability: InStock
Author: entrovyx

Enumerate WordPress landscaping sites for misconfigurations and vulnerable plugins.

3|1|Updated Jul 2, 2026

Search Tags:#vulnerability #reconnaissance #web-security #enumeration #wordpress #landscaping

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-landscaping-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: recon-landscaping
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-landscaping
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-landscaping-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of vulnerabilities specific to landscaping and small business websites, which often lack professional security hardening and rely on outdated WordPress plugins.

Core Features & Use Cases

Sector-Specific Recon: Identifies common landscaping site structures like photo galleries, booking tools, and seasonal service pages.
Vulnerability Identification: Detects directory listings, exposed debug logs, and vulnerable booking plugins that are prevalent in this niche.
Use Case: Quickly audit a list of local landscaping company domains to find exposed EXIF data in photo galleries or misconfigured booking webhooks that could lead to SSRF.

Quick Start

Run the recon-landscaping skill against the target domain provided in the current session to identify potential WordPress vulnerabilities and exposed sensitive files.

Frequently Asked Questions about recon-landscaping

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan landscaping websites for WordPress plugin vulnerabilities?▼

Scanning landscaping websites for WordPress plugin vulnerabilities involves automated curl-based enumeration to detect outdated plugin versions, directory listings, and exposed debug logs prevalent in small business sites.

What security misconfigurations are common in landscaping business websites?▼

Common security misconfigurations in landscaping business websites include directory listings, CORS issues, exposed debug logs, and vulnerable WordPress booking plugins or photo galleries that lack professional hardening.

How do I detect exposed EXIF data in photo galleries on small business sites?▼

Detecting exposed EXIF data in photo galleries on small business sites requires sector-specific reconnaissance targeting common WordPress gallery structures to identify unsecured file uploads and metadata exposure.

Can I audit multiple local landscaping domains for misconfigured booking webhooks?▼

You can audit multiple local landscaping domains to find misconfigured booking webhooks that could lead to SSRF by running automated enumeration against their WordPress-based infrastructure and seasonal service pages.

Does this reconnaissance tool require dependencies to scan for CORS issues?▼

This reconnaissance tool requires no dependencies to scan for CORS issues, utilizing built-in curl-based enumeration to identify security misconfigurations and outdated plugin versions on target domains.