skills.rest
AnandaAnugrahHandyanto
AnandaAnugrahHandyantoCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Gather subdomains, SSL certificates, WHOIS, and DNS records using Python stdlib.

Updated Jun 19, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#bulk-analysis#domain-intel
One-click install
npx skills add https://github.com/AnandaAnugrahHandyanto/savarez_agent --skill domain-intel-anandaanugrahhandyanto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/AnandaAnugrahHandyanto/savarez_agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/AnandaAnugrahHandyanto/savarez_agent --skill domain-intel-anandaanugrahhandyanto

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive OSINT for domain intelligence using only Python stdlib, enabling quick reconnaissance without external APIs.

Core Features & Use Cases

  • Subdomain discovery from Certificate Transparency logs
  • SSL certificate inspection, WHOIS lookups, DNS records, and bulk multi-domain analysis
  • Bulk domain analysis to assess availability and infrastructure

Quick Start

Run the domain_intel.py tool on a target domain to gather subdomains, SSL data, WHOIS details, DNS records, and domain availability signals.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather OSINT domain intelligence without using external APIs?▼

OSINT domain intelligence can be gathered passively using Python's standard library. This tool retrieves subdomains, SSL certificates, WHOIS data, and DNS records by leveraging Certificate Transparency logs, socket-based lookups, and TLS handshakes without requiring API keys.

Can I perform bulk domain analysis for subdomains and SSL certificates?▼

Yes, bulk domain analysis is supported to assess infrastructure across multiple domains. It processes targets to discover subdomains from Certificate Transparency logs and inspects SSL certificates, WHOIS details, and DNS records simultaneously.

Does passive domain reconnaissance require any API keys or dependencies?▼

No, passive domain reconnaissance requires zero dependencies. It operates entirely using Python's built-in standard library, utilizing system DNS and TLS handshakes to gather domain data without needing external API keys.

How do I extract subdomains from Certificate Transparency logs for security research?▼

Subdomains are extracted by querying Certificate Transparency sources. The tool queries these logs to discover associated subdomains, then performs socket-based WHOIS lookups and DNS checks to compile domain infrastructure data.

What format are the outputs returned in when analyzing DNS records and WHOIS data?▼

Outputs are formatted as JSON when analyzing DNS records and WHOIS data. This structured format organizes subdomains, SSL certificate details, and domain availability signals for security researchers.

Are there limitations to passive domain reconnaissance using only Python stdlib?▼

Limitations include relying solely on system DNS and socket-based WHOIS rather than dedicated external APIs. This passive approach gathers infrastructure data without active scanning but depends on Certificate Transparency log availability.

Related Skills

Explore More Education & Research Skills→
afel6afel6

domain-intel

Identify subdomains, SSL details, WHOIS data, DNS records, and domain availability via passive OSINT.

Community
Advanced
ever-oliever-oli
3

domain-intel

Collect passive domain intelligence via subdomains, SSL, WHOIS, DNS, and availability.

Community
Intermediate
refractionPOINTrefractionPOINT
29

sensor-coverage

Inventory assets and assess sensor coverage for LimaCharlie endpoints.

Official
Advanced
cxnaivecxnaive

domain-intel

Perform passive domain reconnaissance using Python standard library modules.

Community
Intermediate