recon-smb-services

What problem does it solve?

Small business service provider websites (plumbers, HVAC technicians, electricians, landscapers, etc.) are frequently built on low-budget, poorly maintained stacks with minimal security, making them easy targets for common, high-impact vulnerabilities that standard recon workflows often miss. This skill provides a targeted, sector-specific workflow to efficiently identify these overlooked flaws without wasting time on irrelevant checks.

Core Features & Use Cases

• 7-phase targeted recon workflow: Covers domain discovery, CMS fingerprinting, contact form PII leak detection, plugin vulnerability scanning, booking tool SSRF surface identification, EXIF geolocation analysis, and pre-built attack chain guidance.
• Sector-specific vulnerability patterns: Focuses on flaws unique to SMB service sites including exposed debug logs with customer PII, directory listing on uploads with invoices/estimates, outdated booking plugins with webhook SSRF, CORS credential reflection on WordPress REST API, and EXIF geolocation data in work gallery photos.
• Use Case: A red teamer scoping a local HVAC company can use this skill to quickly find exposed debug logs containing customer names and addresses, outdated Bookly booking plugins with modifiable webhook URLs, and CORS flaws enabling user enumeration in minutes instead of hours.

Quick Start

Use the recon-smb-services skill to perform a full reconnaissance of a target small business service provider website and identify all high-yield common vulnerabilities for authorized penetration testing.