recon-solar-installers

What problem does it solve?

Solar panel installer and renewable energy company websites often have under-secured high-value assets like financing tools, customer portals, and energy monitoring integrations, making them prime targets for data theft and compromise during authorized security assessments.

Core Features & Use Cases

• Sector-specific domain discovery: Uses solar industry naming patterns to find all associated domains for a target company.
• High-value endpoint scanning: Checks for common solar-specific paths like financing calculators, tax credit forms, and referral portals that often have weak security.
• Sensitive data exposure detection: Finds exposed energy platform API keys (Enphase, SolarEdge, Tesla) and WordPress misconfigurations that leak customer data.
• Use Case: A penetration tester targeting a solar installation company can use this skill to quickly locate exposed customer loan application data and unsecured energy monitoring API keys in minutes.

Quick Start

Use the recon-solar-installers skill to perform a full sector-specific recon scan on a target solar company domain to identify exposed financing endpoints, energy API keys, and WordPress security flaws.