recon-property-management

Name: recon-property-management
Availability: InStock
Author: entrovyx

Recon property management websites for exposed tenant portals and insecure APIs.

3|1|Updated Jul 2, 2026

Search Tags:#reconnaissance #api-security #wordpress #vulnerability-scanning #property-management #tenant-portal

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-property-management-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: recon-property-management
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-property-management
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-property-management-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of vulnerabilities in property management and real estate websites, which often suffer from exposed tenant PII, insecure APIs, and misconfigured WordPress installations.

Core Features & Use Cases

Tenant Portal Discovery: Identifies exposed portals that may leak sensitive lease, payment, and maintenance data.
API & Listing Recon: Scans for property listing APIs that leak data without authentication.
Security Auditing: Detects common WordPress misconfigurations like exposed debug logs, directory listings, and vulnerable plugins.

Quick Start

Run the recon-property-management skill against the target domain example-apartments.com to identify potential tenant portal and API vulnerabilities.

Frequently Asked Questions about recon-property-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan property management websites for exposed tenant portals?▼

To scan property management websites for exposed tenant portals, run targeted reconnaissance against the target domain. It identifies exposed portals that may leak sensitive lease, payment, and maintenance data.

What is property management reconnaissance and what vulnerabilities does it find?▼

Property management reconnaissance is the automated discovery of vulnerabilities in real estate websites. It identifies exposed tenant PII, insecure APIs, and misconfigured WordPress installations.

How do I find insecure property listing APIs that leak data without authentication?▼

To find insecure property listing APIs, execute API and listing recon checks. This scans for property listing APIs that leak data without requiring authentication.

Can I use this to detect WordPress misconfigurations on apartment community websites?▼

Yes, you can detect WordPress misconfigurations on apartment community websites. The security auditing feature checks for exposed debug logs, directory listings, and vulnerable plugins.

Does property management recon check for CORS misconfigurations and PII leakage?▼

Yes, property management recon checks for CORS misconfigurations and PII leakage. It executes automated checks to identify unauthorized access to maintenance or payment systems.