recon-pools

What problem does it solve?

This Skill fills a gap in standard reconnaissance workflows by providing targeted guidance for identifying unique vulnerabilities and high-value assets specific to pool service, pool construction, hot tub, and spa company websites, which often have distinct security weaknesses like exposed photo galleries with EXIF geolocation data, unauthenticated service portals, and exposed debug logs with customer PII that generic recon tools miss.

Core Features & Use Cases

• Sector-specific domain discovery: Uses crt.sh to find pool-related subdomains for a target scope.
• WordPress and asset enumeration: Detects directory listings of pool build photo galleries, exposed debug logs, and CORS misconfigurations on WordPress installations common to these businesses.
• Service portal and payment system detection: Identifies unauthenticated client portals, booking systems, and payment integrations for further testing.
• Use Case: A penetration tester targeting a regional pool construction company can use this Skill to quickly locate exposed before/after project photos with homeowner addresses, unauthenticated client portals with full customer service histories, and debug logs containing payment details and equipment serial numbers.

Quick Start

Use the recon-pools skill to conduct complete sector-specific reconnaissance on a target pool service or pool construction company domain, including WordPress asset discovery, service portal detection, and sensitive data exposure checks.