skills.rest
Chris-Chai-Minjae
Chris-Chai-MinjaeCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Gather subdomains, SSL, WHOIS, DNS, and availability via Python stdlib.

Updated Apr 23, 2026
Search Tags:#dns#ssl#domain#osint#whois#subdomains#bulk-analysis
One-click install
npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill domain-intel-chris-chai-minjae
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill domain-intel-chris-chai-minjae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance is time-consuming and error-prone when done manually; this Skill automates the collection of domain intelligence using only Python stdlib, avoiding API keys and external dependencies.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS lookups (registrar, dates, name servers)
  • DNS records (A, AAAA, MX, NS, TXT, CNAME)
  • Domain availability signals via passive checks
  • Bulk analysis across multiple domains with parallel processing

Quick Start

Run the domain_intel.py CLI against a domain to perform passive OSINT checks and receive structured JSON output.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without external API keys?▼

Passive domain reconnaissance can be performed using only Python's standard library to gather subdomains, SSL details, WHOIS data, and DNS records without requiring any external API keys or dependencies.

Can I gather SSL certificate and WHOIS data in bulk across multiple domains?▼

Yes, bulk analysis across multiple domains is supported with parallel processing via threading, allowing you to concurrently gather SSL certificate details and WHOIS data for numerous domains.

What DNS record types can I retrieve using Python stdlib tools?▼

Using Python stdlib tools, you can retrieve A, AAAA, MX, NS, TXT, and CNAME DNS records, parse certificate transparency logs for subdomains, and check real-time SSL certificate expiration data.

Does this passive OSINT approach work within private network constraints?▼

Yes, this passive OSINT approach handles private network constraints by operating with zero external dependencies, querying DNS and certificate transparency logs directly without needing third-party API authentication.

How do I get structured JSON output for subdomain discovery and DNS records?▼

You can run the CLI interface with commands for subdomains and DNS to receive JSON-structured output, formatting passive domain intelligence data for direct integration into downstream analysis pipelines.

Related Skills

Explore More Data & Analytics Skills→
aayushsoamaayushsoam
1

domain-intel

Perform passive domain reconnaissance using Python stdlib without API keys.

Community
Intermediate
dawsonblockdawsonblock

domain-intel

Perform subdomain discovery, SSL, WHOIS, DNS, and availability checks using Python stdlib.

Community
Intermediate
GratefulJinx77GratefulJinx77

Recon

Perform passive and active network reconnaissance using WHOIS, DNS, and OSINT.

Community
Advanced
JKhyroJKhyro

domain-intel

Map passive domain intelligence via subdomain, SSL, WHOIS, and DNS lookups.

Community
Intermediate