RECON-CHURCHES — Sector-Specific Recon for Church/Religious Organization Sites

When to Use

Use when the target scope includes church, religious organization, or non-profit domains. In mass recon across 28 sectors, religious org domains showed the HIGHEST rate of exploitable findings due to:

• Almost exclusively WordPress on shared hosting
• No WAF (Cloudflare, Sucuri, Wordfence rarely present)
• Volunteer-maintained sites with no security patch cadence
• Dominant patterns: CORS credential reflection + open XMLRPC + debug log exposure

Quick Reference