What problem does it solve?
Solar panel installer and renewable energy company websites often have under-secured high-value assets like financing tools, customer portals, and energy monitoring integrations, making them prime targets for data theft and compromise during authorized security assessments.
Core Features & Use Cases
- Sector-specific domain discovery: Uses solar industry naming patterns to find all associated domains for a target company.
- High-value endpoint scanning: Checks for common solar-specific paths like financing calculators, tax credit forms, and referral portals that often have weak security.
- Sensitive data exposure detection: Finds exposed energy platform API keys (Enphase, SolarEdge, Tesla) and WordPress misconfigurations that leak customer data.
- Use Case: A penetration tester targeting a solar installation company can use this skill to quickly locate exposed customer loan application data and unsecured energy monitoring API keys in minutes.
Quick Start
Use the recon-solar-installers skill to perform a full sector-specific recon scan on a target solar company domain to identify exposed financing endpoints, energy API keys, and WordPress security flaws.