recon-sector-expansion

What problem does it solve?

This skill solves the problem of stalled pentest coverage by eliminating manual, time-consuming work to identify and test fresh target domains across untested business sectors, replacing hours of manual Google searches and certificate transparency log queries with a repeatable, scalable batch workflow.

Core Features & Use Cases

• Coverage Audit: Automatically checks existing target lists to avoid retesting already scanned domains.
• Dual Discovery Sources: Uses crt.sh for local service sectors (roofing, landscaping, HVAC) and Google search for national chain sectors (dental, gyms, auto body) to find 20+ candidate domains across 20+ business verticals.
• Batch Testing Pipeline: Runs a full 6-step vulnerability scan (httpx probe, WordPress enumeration, CORS testing, XMLRPC check, port scan, severity scoring) on all alive targets in a single session.
• Use Case: A pentester who has exhausted their initial target list can use this skill to automatically discover 25 new domains across dental, gym, and auto body sectors, run full scans, and identify high-severity credentialled CORS and WordPress user exposure issues in one workflow.

Quick Start

Use the recon-sector-expansion skill to run a full batch sector expansion, discover 20+ fresh untested business domains, and execute the complete vulnerability testing pipeline to identify high and medium severity findings across all new targets.