skills.rest
BermudaLocals
BermudaLocalsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

domain-intel

Gather passive domain intelligence using Python stdlib and output structured JSON.

1|1|Updated Apr 26, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#domain-intel
One-click install
npx skills add https://github.com/BermudaLocals/hermes-agent-lite --skill domain-intel-bermudalocals
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/BermudaLocals/hermes-agent-lite/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/BermudaLocals/hermes-agent-lite --skill domain-intel-bermudalocals

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive OSINT gathering on domains using only Python's standard library, with no API keys required for data collection.

Core Features & Use Cases

  • Subdomain discovery: finds subdomains via Certificate Transparency logs.
  • SSL certificate inspection: reports expiry, issuer, SANs, and TLS details.
  • WHOIS lookups: retrieves registrar, dates, and nameservers.
  • DNS records: resolves A, AAAA, MX, NS, TXT, and CNAME records.
  • Domain availability checks: passive signals to infer if a domain is likely available or registered.
  • Bulk analysis: runs checks across multiple domains in parallel.

Quick Start

Run python3 domain_intel.py subdomains example.com to begin discovering subdomains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain intelligence gathering without external API keys?▼

Passive domain intelligence gathering is performed using only Python's standard library, requiring zero external API keys for data collection. It covers subdomain discovery, SSL inspection, WHOIS, and DNS records.

Can I find subdomains using Certificate Transparency logs without third-party dependencies?▼

Subdomain discovery is achieved by querying Certificate Transparency logs to find subdomains. This implementation relies entirely on Python's standard library, requiring no third-party dependencies or external API keys.

How do I check SSL certificate expiry and SANs for multiple domains in bulk?▼

SSL certificate inspection reports expiry, issuer, SANs, and TLS details, while bulk analysis runs checks across multiple domains in parallel. The process uses concurrent execution for fast, structured JSON output.

What DNS records can I resolve using only Python stdlib?▼

DNS resolution using Python stdlib retrieves A, AAAA, MX, NS, TXT, and CNAME records. It provides structured JSON output for domain intelligence without requiring any external dependencies or API keys.

How do I check domain availability and WHOIS data passively?▼

Domain availability checks use passive signals to infer if a domain is likely registered, while WHOIS lookups retrieve registrar, dates, and nameservers. Both are executed without external API keys using Python stdlib.

Related Skills

Explore More Data & Analytics Skills→
zerwizzerwiz

domain-intel

Your AI-powered command and data center for domain intelligence, delivering instant situational awareness and automated reporting to accelerate your next move.

Community
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
BishopCodesBishopCodes
1

Recon

Enumerate subdomains, DNS records, mail servers, and open ports.

Community
Advanced
AeonDaveAeonDave
15

amass

Enumerate subdomains and map attack surfaces for a domain.

Community
Advanced