recon-pet-grooming

Identify security vulnerabilities in pet grooming websites via booking APIs and CMS configurations.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-pet-grooming-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-pet-grooming
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-pet-grooming
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-pet-grooming-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill streamlines the reconnaissance process for pet grooming and care websites, identifying common vulnerabilities like IDORs, PII leaks, and misconfigured booking portals that are prevalent in this specific business sector.

Core Features & Use Cases

  • Platform Fingerprinting: Automatically detects booking platforms like Gingr, PetExec, and TimeToPet.
  • Vulnerability Discovery: Probes for common security gaps including debug log exposure, booking API IDORs, and sensitive data leakage in photo galleries.
  • Use Case: When auditing a local pet grooming salon, use this skill to quickly identify if their booking API exposes customer PII or if their photo gallery contains geolocation data in EXIF tags.

Quick Start

Use the recon-pet-grooming skill to perform a full security assessment on the target domain example.com.

Frequently Asked Questions about recon-pet-grooming

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find IDOR vulnerabilities in pet grooming booking APIs?

To find IDOR vulnerabilities in pet grooming booking APIs, probe endpoints using curl and jq to extract sensitive customer information from public-facing directories. This identifies insecure direct object references prevalent in small business pet care portals.

What common security vulnerabilities affect pet care booking platforms like Gingr and PetExec?

Pet care booking platforms like Gingr and PetExec commonly suffer from booking API IDORs, customer PII leaks, debug log exposure, and EXIF geolocation data in photo galleries. These misconfigurations expose sensitive client data through public-facing web portals.

How do I fingerprint a pet grooming website CMS during a pentest?

To fingerprint a pet grooming website CMS during a pentest, analyze the target domain to automatically detect specific booking platforms like Gingr, PetExec, and TimeToPet. This identifies the underlying configuration for targeted vulnerability discovery.

Do I need curl and jq to perform reconnaissance on pet grooming websites?

Yes, you need curl and jq to perform reconnaissance on pet grooming websites. These command-line tools are required to analyze API endpoints and parse JSON responses to extract sensitive information from public-facing directories during manual penetration testing.

How can I detect PII leaks in local pet salon web portals?

You can detect PII leaks in local pet salon web portals by probing for misconfigured booking APIs and sensitive data leakage in photo galleries. Targeted reconnaissance identifies exposed customer personally identifiable information in these specific business sector platforms.