recon-laundromats

Probe laundromat websites for security misconfigurations and exposed data.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-laundromats-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-laundromats
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/recon-laundromats
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-laundromats-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the lack of specialized reconnaissance workflows for small-business laundry and dry-cleaning websites, which often suffer from misconfigured booking portals and exposed customer data.

Core Features & Use Cases

  • Sector-Specific Recon: Identifies vulnerabilities in common platforms like Cents, LaundryLocker, and custom PHP booking systems.
  • Data Exposure Detection: Automatically probes for debug logs, directory listings of invoices, and price calculator injection points.
  • Use Case: A security researcher can use this to quickly identify exposed customer PII in debug logs or insecure price calculators on local laundromat websites.

Quick Start

Use the recon-laundromats skill to perform a full vulnerability scan on the target domain example.com.

Frequently Asked Questions about recon-laundromats

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security misconfigurations on laundromat booking websites?▼

Targeted reconnaissance probes laundromat booking websites to identify security misconfigurations by analyzing web infrastructure, booking endpoints, and third-party integrations for vulnerabilities like price calculator injection and debug log leakage.

What vulnerabilities are common in dry-cleaning service web platforms?▼

Common vulnerabilities in dry-cleaning web platforms include exposed customer PII in debug logs, directory listings of invoices, and price calculator injection points across platforms like Cents, LaundryLocker, and custom PHP booking systems.

Can I scan for exposed invoice directories on laundry service sites?▼

Yes, you can scan for exposed invoice directories on laundry service sites by executing HTTP-based probes and directory enumeration against the target scope to automatically detect data exposure and misconfigured booking portals.

Do I need curl to perform reconnaissance on local laundromat websites?▼

Yes, you need standard network utilities including curl to execute the HTTP-based probes and directory enumeration required to perform targeted reconnaissance on local laundromat websites.

Does this reconnaissance support custom PHP booking systems and Cents platforms?▼

This reconnaissance supports custom PHP booking systems and Cents platforms by analyzing their specific booking system endpoints and third-party platform integrations to identify data exposure and security misconfigurations.