skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

dns-intelligence

Analyze MX, TXT, NS, CNAME, and SRV DNS records to identify service providers.

7|1|Updated Apr 14, 2026
Search Tags:#dns#dns analysis#dns records#dns intelligence#infrastructure analysis
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill dns-intelligence-arianhobson333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dns-intelligence
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/communitytools/projects/pentest/.claude/skills/techstack-identification/dns_intelligence
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill dns-intelligence-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dig, and includes scripts (resource) components.

What problem does it solve?

This Skill extracts technology signals from DNS records, helping to identify the email provider, DNS provider, CDN, hosting provider, and other services associated with a domain.

Core Features & Use Cases

  • MX Record Analysis: Identify email provider from MX records.
  • TXT Record Analysis: Find service verification tokens in TXT records.
  • NS Record Analysis: Identify DNS provider from NS records.
  • CNAME Record Analysis: Detect CDN/hosting delegations from CNAME records.
  • SRV Record Analysis: Find enterprise services from SRV records.
  • Use Case: For example, a penetration tester can use this Skill to analyze DNS records of a target domain to gain insights into the infrastructure and potential vulnerabilities.

Quick Start

Run the command 'dns-intelligence' with the target domain to extract DNS intelligence.

Frequently Asked Questions about dns-intelligence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify email and DNS providers from DNS records for a domain?▼

DNS intelligence analyzes MX and NS records to identify the email and DNS providers associated with a target domain. It extracts technology signals to reveal the infrastructure supporting the domain.

Can I detect CDN and hosting delegations by analyzing CNAME records?▼

Yes, analyzing CNAME records detects CDN and hosting delegations for a domain. The DNS intelligence process examines these record types to uncover the specific hosting providers and content delivery networks utilized.

How do TXT records reveal service verification tokens during infrastructure analysis?▼

TXT records contain service verification tokens from various third-party platforms, which DNS intelligence extracts to identify other services associated with the domain. This reveals software and tools integrated into the target infrastructure.

Do I need dig installed to extract technology signals from DNS records?▼

Yes, you need the dig command-line utility installed as a dependency to extract technology signals. The DNS intelligence scripts rely on dig to query and retrieve the MX, TXT, NS, CNAME, and SRV records.

What is the best way to find enterprise services from SRV records?▼

The best way to find enterprise services is by running DNS intelligence to analyze SRV records. This identifies the specific enterprise services and infrastructure delegations configured for the target domain.

Why use DNS analysis for penetration testing and infrastructure reconnaissance?▼

DNS analysis is used for penetration testing to gain insights into the target infrastructure and potential vulnerabilities. By analyzing DNS records, testers map out the technology stack and identify services before deeper probing.

Related Skills

Explore More Software Engineering Skills→
L3DigitalNetL3DigitalNet
6

bind-utils

Query DNS records and diagnose resolution issues with dig, nslookup, and host.

Official
Intermediate
athina-aiathina-ai
1.1k

tech-stack-teardown

Detect CRM, cold email, and ad tools from DNS and website source code.

Official
Advanced
ErixWongErixWong
17

net-operations

Perform DNS lookups, SSL certificate analysis, and HTTP header checks.

Community
Intermediate
Quill-AgentQuill-Agent
3

domain-intel

Perform passive domain reconnaissance including subdomain discovery, SSL inspection, WHOIS, DNS records, and availability checks.

Community
Advanced