RECON-TREE-SERVICES — Tree Service Company Recon

When to Use

Use when the target scope includes tree service, arborist, tree removal, stump grinding, or landscaping-with-tree-work company domains. These small-to-medium businesses typically run WordPress or custom PHP on shared hosting with minimal security posture, often exposing customer PII via estimate forms, CRM portals, and photo galleries.

Quick Reference

• Common CMS: WordPress (dominant), custom PHP, Wix, Squarespace
• Common platforms: Arborgold, ArborNote, SingleOps, Jobber, GorillaDesk
• Key endpoints: /estimate, /free-estimate, /contact, /request-quote, /service-area
• Customer portals: Arborgold client login, Jobber client portal (often accessible via subdomain)
• Key findings: Contact form PII leakage, debug logs, directory listing on uploads, outdated plugins

Step-by-Step

1. CMS Detection

   curl -skI "https://$TARGET/" | grep -iE "x-powered-by|set-cookie|server"
   curl -sk "https://$TARGET/" | grep -iE "generator|wp-content|wp-json"