recon-mattress-stores

What problem does it solve?

Manual reconnaissance of mattress retail and bedding e-commerce sites is inefficient, as these targets use niche platform configurations, financing integrations, and store locator implementations that require sector-specific checks to identify common security misconfigurations and data exposures.

Core Features & Use Cases

• Sector-Specific Platform Fingerprinting: Automatically detect common e-commerce platforms used by mattress retailers, including Shopify, WooCommerce, BigCommerce, and Magento.
• Financing API Exposure Detection: Identify misconfigured or exposed financing integration endpoints for Affirm, Klarna, Bread, and Synchrony that may leak API keys or allow unauthorized access.
• Store Locator Data Leakage Checks: Scan for public store locator pages and APIs that expose internal PII such as manager names, email addresses, and phone numbers.
• Use Case: A penetration tester assessing a DTC mattress-in-a-box brand can use this skill to quickly identify exposed WooCommerce REST API endpoints and leaked store manager PII, reducing initial recon time from hours to minutes.

Quick Start

Use the recon-mattress-stores skill to perform full sector-specific reconnaissance on the target mattress retail website, including platform fingerprinting, financing API discovery, and store locator data leakage checks.