RECON-PROPERTY-MANAGEMENT — Sector-Specific Recon for Property Management Company Sites

When to Use

Use when the target scope includes property management companies, apartment rental agencies, real estate management firms, HOA management, or multi-family property group domains. These sites typically run WordPress on shared hosting with rental property listings (photos, floor plans, pricing, availability), tenant portals for maintenance requests and payments (storing PII including SSN on credit applications, bank account info for rent payment), and vacancy/availability data. Major PM software includes AppFolio, Buildium, Yardi, Entrata, ResMan, and Propertyware; but many smaller firms use WordPress with various plugins. Common vulnerabilities: tenant portal auth bypass, rent payment API exposure, maintenance request data leakage, and CORS credential reflection.

Quick Reference

for t in $(cat pm-targets.txt); do
  echo "=== $t ==="
  curl -skI "https://$t/" | grep -iE "wordpress|php|wp-"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-json/wp/v2/users" -H "Origin: https://evil.com"
  curl -skI "https://$t/wp-json/" -H "Origin: https://evil.com" | grep -i "access-control"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/xmlrpc.php"
  curl -sk -o /dev/null -w "%{http_code}" "https://$t/wp-content/debug.log"
  echo "---"
done