RECON-LANDSCAPING — Sector-Specific Recon for Landscaping Company Sites

When to Use

Use when the target scope includes landscaping, lawn care, tree service, irrigation, or hardscaping company domains. These sites are characterized by WordPress on shared hosting with photo galleries of work, online booking/estimating features, and seasonal service page structures. Common vulnerabilities: directory listing on work photo galleries with EXIF data, exposed debug logs, CORS credential reflection, and booking plugin vulnerabilities.

Quick Reference

for t in $(cat landscaping-targets.txt); do
  echo "=== $t ==="
  curl -skI "https://$t/" | grep -iE "wordpress|php|wp-"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-content/debug.log"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-content/uploads/"
  curl -skI "https://$t/wp-json/wp/v2/users" -H "Origin: https://evil.com" | grep -i "access-control"
  echo "---"
done