Detect exposed PII and insecure booking APIs on pet care websites.
npx skills add https://github.com/uphiago/recon-skills --skill recon-pet-grooming
Please help me install this Agent Skill. Skill: recon-pet-grooming Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-pet-grooming Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-pet-grooming
Pet grooming, pet care, dog walking, and pet sitting small business websites frequently store sensitive customer and pet personally identifiable information (PII), use unvalidated booking systems, and host public assets that can be exploited by attackers to steal data or gain unauthorized access to client portals.
Use the recon-pet-grooming skill to perform sector-specific reconnaissance on a pet care company website to identify exposed customer PII, insecure booking endpoints, and sensitive asset leaks.
High-intent search queries and answers about installing and using this skill.
To find IDOR flaws in pet care booking APIs, probe common booking endpoints on platforms like Gingr, PetExec, and TimeToPet using sequential ID testing to expose unauthorized customer appointment details and home access codes.
Exposed sensitive data on pet grooming WordPress sites includes plaintext personally identifiable information in debug logs, customer intake form uploads, and hardcoded third-party platform API keys in client-side code.
EXIF geolocation data leaks in pet sitting photo galleries when public image assets retain their original metadata, allowing attackers to extract precise location coordinates from customer pet photos.
You can test Rover and Wag booking endpoints for insecure direct object references by probing their APIs for sequential ID manipulation to verify if customer pet medical records and home access codes are exposed.
The best way to fingerprint a pet care site's booking platform is to identify common signatures for Gingr, PetExec, TimeToPet, and Rover, while also detecting an underlying WordPress CMS with custom scheduling functionality.
Use sector-specific recon instead of general website scanning when targeting pet care small businesses to quickly locate platform-specific vulnerabilities like unvalidated booking systems and exposed customer PII unique to the industry.
EntroVyxIdentify security vulnerabilities in pet grooming websites via booking APIs and CMS configurations.
EntroVyxTest salon booking APIs for PII leakage, IDOR, and unauthenticated data exposure.
uphiagoRun a 7-phase reconnaissance workflow on small business service websites.
EntroVyxAutomate reconnaissance of car wash websites for exposed PII and vulnerable plugins.
