RECON-DAYCARE — Sector-Specific Recon for Daycare/Childcare Organization Sites

When to Use

Use when the target scope includes daycare, childcare, preschool, or early-education domains. These sites are high-value due to:

PII of minors — child names, ages, medical info, parent/guardian contact details, emergency contacts
Payment processing — tuition payments, registration fees — often processed through embedded third-party checkout (Square, Stripe) but sometimes stored in DB
Volunteer/family portals — login forms, photo galleries, daily reporting features — often custom-coded with auth flaws
Common stack — WordPress on shared hosting, rarely any WAF or security team
Photo galleries — often accessible without auth, EXIF data leaks device info, geolocation