Identify pool service website vulnerabilities via domain and WordPress enumeration.
npx skills add https://github.com/uphiago/recon-skills --skill recon-pools
Please help me install this Agent Skill. Skill: recon-pools Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-pools Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-pools
This Skill fills a gap in standard reconnaissance workflows by providing targeted guidance for identifying unique vulnerabilities and high-value assets specific to pool service, pool construction, hot tub, and spa company websites, which often have distinct security weaknesses like exposed photo galleries with EXIF geolocation data, unauthenticated service portals, and exposed debug logs with customer PII that generic recon tools miss.
Use the recon-pools skill to conduct complete sector-specific reconnaissance on a target pool service or pool construction company domain, including WordPress asset discovery, service portal detection, and sensitive data exposure checks.
High-intent search queries and answers about installing and using this skill.
To find exposed customer PII on pool service company websites, you can use sector-specific reconnaissance to detect exposed debug logs and directory listings. This approach targets distinct weaknesses like unauthenticated client portals common to these businesses.
Security vulnerabilities unique to pool construction and hot tub websites include exposed photo galleries with EXIF geolocation data, unauthenticated service portals, and debug logs containing payment details. These sites often feature distinct weaknesses missed by generic recon tools.
To enumerate WordPress assets for a pool service target, this reconnaissance workflow detects directory listings of build photo galleries, exposed debug logs, and CORS misconfigurations. It applies targeted asset discovery to WordPress installations common to these businesses.
Yes, you can use this reconnaissance approach for small to medium-sized spa and pool service businesses. It is specifically designed for penetration testing and red team engagements targeting the pool services sector, covering domain discovery and portal detection.
The best way to discover unauthenticated client portals on pool service sites is through targeted service portal detection. This reconnaissance identifies booking systems, payment integrations, and client portals exposing customer service histories for further testing.
Standard reconnaissance misses vulnerabilities on pool service company websites because it lacks targeted guidance for sector-specific weaknesses like EXIF geolocation data in photo galleries and unrestricted third-party API keys. This approach fills that gap with focused discovery.
jassicsCoordinates passive and active enumeration of authorized attack surfaces for penetration testing.
uphiagoIdentify sector-specific security vulnerabilities in car wash business websites.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
chainreactorsProbe HTTP services and fingerprint web technologies on target hosts.
