skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

recon-property-management

Recon property management websites for exposed tenant portals and insecure APIs.

3|1|Updated Jul 2, 2026
Search Tags:#reconnaissance#api-security#wordpress#vulnerability-scanning#property-management#tenant-portal
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-property-management-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-property-management
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-property-management
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-property-management-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of vulnerabilities in property management and real estate websites, which often suffer from exposed tenant PII, insecure APIs, and misconfigured WordPress installations.

Core Features & Use Cases

  • Tenant Portal Discovery: Identifies exposed portals that may leak sensitive lease, payment, and maintenance data.
  • API & Listing Recon: Scans for property listing APIs that leak data without authentication.
  • Security Auditing: Detects common WordPress misconfigurations like exposed debug logs, directory listings, and vulnerable plugins.

Quick Start

Run the recon-property-management skill against the target domain example-apartments.com to identify potential tenant portal and API vulnerabilities.

Frequently Asked Questions about recon-property-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan property management websites for exposed tenant portals?▼

To scan property management websites for exposed tenant portals, run targeted reconnaissance against the target domain. It identifies exposed portals that may leak sensitive lease, payment, and maintenance data.

What is property management reconnaissance and what vulnerabilities does it find?▼

Property management reconnaissance is the automated discovery of vulnerabilities in real estate websites. It identifies exposed tenant PII, insecure APIs, and misconfigured WordPress installations.

How do I find insecure property listing APIs that leak data without authentication?▼

To find insecure property listing APIs, execute API and listing recon checks. This scans for property listing APIs that leak data without requiring authentication.

Can I use this to detect WordPress misconfigurations on apartment community websites?▼

Yes, you can detect WordPress misconfigurations on apartment community websites. The security auditing feature checks for exposed debug logs, directory listings, and vulnerable plugins.

Does property management recon check for CORS misconfigurations and PII leakage?▼

Yes, property management recon checks for CORS misconfigurations and PII leakage. It executes automated checks to identify unauthorized access to maintenance or payment systems.

Related Skills

Explore More Software Engineering Skills→
uphiagouphiago
1.1k

recon-property-management

Discover tenant portals, property APIs, and debug logs on property management sites.

Community
Intermediate
EntroVyxEntroVyx
3

recon-moving-companies

Automate security reconnaissance of moving company websites for PII leaks and configuration vulnerabilities.

Community
Intermediate
EntroVyxEntroVyx
3

recon-fire-restoration

Automate security reconnaissance of WordPress restoration sites to detect PII leaks and misconfigurations.

Community
Intermediate
uphiagouphiago
1.1k

recon-daycare

Detect exposed minor PII and WordPress vulnerabilities in daycare websites.

Community
Intermediate