skills.rest
GarrettRoi
GarrettRoiCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Perform passive domain reconnaissance via Certificate Transparency, SSL, WHOIS, and DNS checks.

Updated Mar 12, 2026
Search Tags:#reconnaissance#dns#ssl#domain#osint#whois#subdomain
One-click install
npx skills add https://github.com/GarrettRoi/open-manus --skill domain-intel-garrettroi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/GarrettRoi/open-manus/tree/main/skills/research/domain-intel
Command: npx skills add https://github.com/GarrettRoi/open-manus --skill domain-intel-garrettroi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates passive domain reconnaissance, providing crucial intelligence without requiring API keys or external services, making it ideal for initial domain analysis.

Core Features & Use Cases

  • Subdomain Discovery: Identifies subdomains using Certificate Transparency logs.
  • SSL Certificate Inspection: Retrieves details like expiry, issuer, and Subject Alternative Names.
  • WHOIS Lookups: Gathers registration information, dates, and name servers.
  • DNS Record Retrieval: Fetches A, AAAA, MX, NS, TXT, and CNAME records.
  • Domain Availability Checks: Assesses domain availability based on passive signals.
  • Bulk Analysis: Performs multiple checks across multiple domains concurrently.
  • Use Case: Before engaging with a new domain, use this skill to quickly gather its subdomains, SSL certificate status, and WHOIS information to understand its digital footprint.

Quick Start

Run a bulk analysis on example.com, github.com, and google.com including SSL and DNS checks.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without API keys?▼

Passive domain reconnaissance can be performed using Python's standard library to query Certificate Transparency logs, WHOIS records, and DNS configurations without requiring external API keys.

What is subdomain discovery via Certificate Transparency logs?▼

Subdomain discovery via Certificate Transparency logs involves querying public SSL certificate issuance records to identify subdomains associated with a target domain.

How do I check SSL certificate details and WHOIS records for multiple domains?▼

You can run bulk analysis across multiple domains concurrently to retrieve SSL certificate details like expiry and issuer, alongside WHOIS registration information.

Can I retrieve DNS records like A, MX, and TXT without external services?▼

Yes, DNS record retrieval for A, AAAA, MX, NS, TXT, and CNAME records is handled locally using Python's standard library, requiring no external services or API authentication.

Does domain availability checking work using only passive OSINT signals?▼

Domain availability checks assess a domain's status by analyzing passive OSINT signals gathered from WHOIS data and DNS records rather than active probing.

What are the limitations of using Python standard library for OSINT reconnaissance?▼

Using Python's standard library for OSINT reconnaissance limits queries to passive data sources like transparency logs and DNS, avoiding active scanning or rate-limited proprietary APIs.

Related Skills

Explore More Software Engineering Skills→
cxnaivecxnaive

domain-intel

Perform passive domain reconnaissance using Python standard library modules.

Community
Intermediate
Yangel-hideYangel-hide

domain-intel

Collect passive domain intelligence using Python's standard library and output structured JSON.

Community
Intermediate
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
DaddyElonMusk69DaddyElonMusk69

domain-intel

Enumerate subdomains and inspect SSL certificates, WHOIS, and DNS records.

Community
Advanced