skills.rest
DaddyElonMusk69
DaddyElonMusk69COMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Enumerate subdomains and inspect SSL certificates, WHOIS, and DNS records.

Updated Apr 12, 2026
Search Tags:#domain reconnaissance#subdomain discovery#osint#domain availability#dns records#whois lookup#ssl inspection
One-click install
npx skills add https://github.com/DaddyElonMusk69/motis-agent --skill domain-intel-daddyelonmusk69
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/DaddyElonMusk69/motis-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/DaddyElonMusk69/motis-agent --skill domain-intel-daddyelonmusk69

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the need for quick, dependency-free domain intelligence gathering, enabling passive reconnaissance without requiring API keys or external services that could expose your queries or incur costs.

Core Features & Use Cases

  • Subdomain Discovery: Enumerate subdomains from Certificate Transparency logs for mapping attack surfaces or understanding infrastructure.
  • SSL Certificate Inspection: Analyze TLS details like expiry dates, issuers, and subject alternative names to assess security posture.
  • WHOIS and DNS Lookups: Retrieve registration info, name servers, and records (A, MX, TXT, etc.) for ownership and configuration insights.
  • Availability Checks and Bulk Analysis: Heuristically verify domain status and run parallel checks across multiple domains.
  • Use Case: In a cybersecurity assessment, use this Skill to quickly gather WHOIS data, DNS records, and subdomains for a target like "example.com" to build a reconnaissance report without alerting the target.

Quick Start

Use the domain-intel skill to perform a WHOIS lookup and subdomain discovery on example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without using external APIs?▼

Passive domain reconnaissance can be performed without external APIs by utilizing the Python standard library to query Certificate Transparency logs, resolve DNS records, and inspect SSL certificates directly. This approach ensures zero-dependency, cross-platform operations.

Can I enumerate subdomains without API keys or alerting the target?▼

Subdomain enumeration without API keys is possible by passively querying Certificate Transparency logs. This method maps the target's attack surface and infrastructure without sending direct requests to the target's servers.

How do I check SSL certificate details and DNS records for a specific domain?▼

To check SSL certificate details and DNS records, use Python's standard library to establish TLS connections for certificate inspection and perform DNS resolution for A, MX, and TXT records.

What is the best way to run bulk WHOIS lookups and availability checks across multiple domains?▼

Bulk WHOIS lookups and availability checks across multiple domains are executed using parallel processing techniques built into Python scripts, retrieving registration info and heuristically verifying domain status simultaneously.

Does this domain OSINT approach work on Windows, macOS, and Linux?▼

This domain OSINT approach works cross-platform on Windows, macOS, and Linux because it relies solely on the Python standard library, requiring no external dependencies or specialized environment setups.

What are the limitations of using zero-dependency Python scripts for cybersecurity analysis?▼

Limitations of zero-dependency Python scripts include potential rate limiting from target servers during parallel checks and reliance on the availability of public data sources like Certificate Transparency logs.

Related Skills

Explore More Education & Research Skills→
cxnaivecxnaive

domain-intel

Perform passive domain reconnaissance using Python standard library modules.

Community
Intermediate
jassicsjassics
6

osint-footprinting

Map an organization's external attack surface from public DNS, WHOIS, and scan datasets.

Community
Intermediate
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
brucesongsbrucesongs
60

recon-osint

Perform OSINT reconnaissance to build target profiles from public sources.

Community
Advanced