skills.rest
davpatel605-beep
davpatel605-beepCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Discover subdomains, inspect certificates, and retrieve DNS and WHOIS data.

Updated Jun 25, 2026
Search Tags:#dns#subdomain discovery#ssl#domain#osint#whois
One-click install
npx skills add https://github.com/davpatel605-beep/hermusagent --skill domain-intel-davpatel605-beep
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/davpatel605-beep/hermusagent/tree/main/backend/vendor/hermes/optional-skills/research/domain-intel
Command: npx skills add https://github.com/davpatel605-beep/hermusagent --skill domain-intel-davpatel605-beep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill removes the complexity of passive domain reconnaissance by providing quick access to domain infrastructure details without requiring external services, paid APIs, or additional dependencies.

Core Features & Use Cases

  • Domain Discovery: Find subdomains through Certificate Transparency logs and inspect domain ownership signals.
  • Infrastructure Analysis: Check SSL certificates, DNS records, WHOIS information, and domain availability status.
  • Use Case: Security researchers and infrastructure teams can analyze a set of domains to understand exposed subdomains, certificate status, registration details, and DNS configuration.

Quick Start

Use the domain-intel skill to analyze the DNS records, SSL certificate, and WHOIS information for example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find subdomains and retrieve WHOIS information without using paid APIs?▼

You can discover subdomains and retrieve WHOIS information without paid APIs by leveraging Certificate Transparency logs and Python standard library capabilities. This approach enables passive OSINT workflows and infrastructure reviews across multiple domains efficiently.

Can I check SSL certificates and DNS records for multiple domains in bulk?▼

You can inspect SSL certificates and resolve DNS records for multiple domains in parallel. The bulk analysis supports certificate transparency queries and DNS resolution to review infrastructure status and exposed subdomains simultaneously across your target list.

What is the best way to perform passive domain reconnaissance for security research?▼

Passive domain reconnaissance is best performed by analyzing domain infrastructure signals like registration details, DNS configuration, and SSL certificate status. This approach avoids active scanning while uncovering subdomains through certificate transparency queries.

Do I need to install external Python dependencies to analyze domain infrastructure?▼

No, you do not need to install external dependencies to analyze domain infrastructure. The Skill operates entirely using the Python standard library, supporting WHOIS lookups, DNS resolution, and certificate transparency queries without requiring additional packages.

Does domain intelligence gathering work for domain availability investigations?▼

Yes, domain intelligence gathering works for domain availability investigations. By retrieving registration and WHOIS information alongside DNS resolution, you can determine availability status and ownership signals of target domains within passive OSINT workflows.

Related Skills

Explore More Legal & Compliance Skills→
DaddyElonMusk69DaddyElonMusk69

domain-intel

Enumerate subdomains and inspect SSL certificates, WHOIS, and DNS records.

Community
Advanced
ragnarokhaaragnarokhaa
4

domain-intel

Identify subdomains, SSL details, WHOIS data, and DNS records using Python stdlib.

Community
Intermediate
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
SnailSploitSnailSploit
2.9k

osint-methodology

Guide structured OSINT investigations from scoping to reporting.

Community
Advanced