One-click install
npx skills add https://github.com/uphiago/recon-skills --skill recon-laundromats
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-laundromats
Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-laundromats
Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-laundromats

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill fills the gap of targeted reconnaissance guidance for small local laundromat, dry cleaning, and laundry service websites, which often run on minimally secured WordPress or custom PHP installations with common exposure of customer PII, unvalidated booking tools, and misconfigured third-party integrations.

Core Features & Use Cases

  • Sector-specific endpoint discovery: Locates common service endpoints like order scheduling, pricing calculators, and customer portals unique to laundry service businesses.
  • High-risk finding detection: Identifies exposed customer order data in debug logs, public directory listings of invoices/receipts, and leaked third-party platform API keys.
  • Use case: A penetration tester scoping a local laundromat chain can use this skill to quickly map the target's attack surface and locate exploitable flaws in booking and pricing systems.

Quick Start

Use the recon-laundromats skill to perform a full reconnaissance scan of the target laundromat website to identify exposed customer data, vulnerable booking endpoints, and misconfigured third-party platform integrations.

Frequently Asked Questions about recon-laundromats

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities in laundromat and dry cleaning websites?

Recon laundromat sites by scanning for exposed customer PII in debug logs, unvalidated price calculator injection points, public invoice directory listings, and leaked third-party platform API keys in booking systems.

What common security flaws affect WordPress booking systems for laundry services?

WordPress booking systems for laundry services commonly exhibit exposed customer order data in debug logs, misconfigured third-party integrations, public directory listings of invoices, and unvalidated pickup and delivery scheduling endpoints.

Can I detect exposed customer PII during penetration testing of local service businesses?

Yes, you can detect exposed customer PII by enumerating laundry service endpoints and checking for public directory listings of invoices, receipts, and debug logs that inadvertently expose customer account portal data.

How do I test price calculator injection points on custom PHP sites?

Test price calculator injection points on custom PHP sites by targeting unvalidated input fields within laundromat pricing tools to identify exploitable flaws in the online ordering and service calculation workflows.

Does laundromat reconnaissance work on small local service businesses running common industry platforms?

Yes, laundromat reconnaissance effectively maps the attack surface of small local service businesses running on minimally secured WordPress, custom PHP, or common industry platforms with online ordering and customer account portals.