Runs sector-parameterized reconnaissance probes against WordPress-heavy SMB target lists.
npx skills add https://github.com/uphiago/recon-skills --skill recon-sector
Please help me install this Agent Skill. Skill: recon-sector Source: https://github.com/uphiago/recon-skills/tree/main/redteam/recon-sector Command: npx skills add https://github.com/uphiago/recon-skills --skill recon-sector
Manual reconnaissance across many small-business targets in the same industry repeats identical probes with only paths and platforms changing, wasting time and producing inconsistent coverage.
Run sector reconnaissance on my authorized target list by loading the dentists sector data and probing each domain for WordPress, CORS, XMLRPC, and exposed debug logs.
High-intent search queries and answers about installing and using this skill.
Provide a text file with one domain per line, select a sector name, and run the probe suite which loads sector-specific paths from sectors.yaml. It checks WordPress detection, CORS reflection, XMLRPC, debug logs, and industry-specific paths per target.
It checks wp-login.php presence, /wp-json/wp/v2/users for user enumeration, CORS credential reflection on the REST API, xmlrpc.php including multicall support, /wp-content/debug.log for PII, directory listing on uploads, and source leaks like .env and .git.
Cross-check suspicious targets: if /robots.txt and /.env both return HTTP 200 with near-identical HTML bodies, mark the domain as parked and skip it. Also resolve a random subdomain first to detect wildcard DNS.
A CORS finding is only valid when the response reflects the attacker origin in Access-Control-Allow-Origin AND sets Access-Control-Allow-Credentials: true. ACAO wildcard without credentials is not exploitable and must not be reported.
It only covers the 25 predefined sectors in sectors.yaml and focuses on WordPress-dominant SMB stacks, so atypical platforms need manual probing. Rate limiting, WAFs, and parked domains also require the documented verification steps to avoid noise.
sseshachalaLoad modular OSINT reference files for authorized external red-team reconnaissance.
EntroVyxIdentify and exploit WordPress CORS, XMLRPC, and registration chains.
EntroVyxAutomate security reconnaissance of moving company websites for PII leaks and configuration vulnerabilities.
uphiagoBatch scan domains for WordPress vulnerabilities and generate prioritized reports.
