RECON-CARWASHES — Sector-Specific Recon for Car Wash & Auto Detailing Sites

When to Use

Use when the target scope includes car wash, auto detailing, or car care company domains. These small-to-medium businesses typically run WordPress or custom PHP on shared hosting with membership/subscription portals, pricing menus, and online booking systems. Common vulnerabilities: exposed membership databases via debug logs, booking plugin CVEs, directory listing on photo galleries (before/after detailing work), and exposed payment processing endpoints.

Quick Reference

for t in $(cat carwash-targets.txt); do
  echo "=== $t ==="
  curl -skI "https://$t/" | grep -iE "wordpress|php|wp-"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-content/debug.log"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-content/uploads/"
  curl -skI "https://$t/wp-json/wp/v2/users" -H "Origin: https://evil.com" | grep -i "access-control"
  echo "---"
done