skills.rest
heysuhas
heysuhasCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

domain-intel

Perform passive domain reconnaissance using standard Python libraries.

2|1|Updated Jul 14, 2026
Search Tags:#security#reconnaissance#dns#ssl#osint#whois
One-click install
npx skills add https://github.com/heysuhas/hermes_cli --skill domain-intel-heysuhas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/heysuhas/hermes_cli/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/heysuhas/hermes_cli --skill domain-intel-heysuhas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill solves the need for rapid, passive infrastructure intelligence without relying on external API keys or complex third-party services.

Core Features & Use Cases

  • Passive Reconnaissance: Perform subdomain discovery, SSL inspection, and WHOIS lookups using only standard Python libraries.
  • Bulk Analysis: Run multiple intelligence checks across a list of domains in parallel to audit large infrastructure sets.
  • Use Case: Quickly verify the registration status, DNS records, and SSL certificate health of a list of domains to assess their security posture or availability.

Quick Start

Use the domain-intel skill to perform a full DNS and SSL check on example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without external API keys?▼

Passive domain reconnaissance without external API keys is achieved by leveraging standard Python libraries to query public certificate logs and perform direct network queries for subdomain discovery, SSL inspection, and WHOIS lookups.

What is the best way to check SSL certificate health and DNS records for multiple domains?▼

The best way to check SSL certificate health and DNS records for multiple domains is by running bulk intelligence checks in parallel, allowing you to quickly audit large infrastructure sets without relying on third-party services.

Can I use Python to discover subdomains using certificate transparency logs?▼

Yes, you can use Python to discover subdomains by querying public certificate transparency logs directly, operating without any external API dependencies to gather infrastructure intelligence passively.

Do I need to install third-party libraries to run WHOIS lookups and DNS resolution?▼

No, you do not need to install third-party libraries to run WHOIS lookups and DNS resolution; the task operates entirely using standard Python libraries for direct network queries.

When do I need passive OSINT infrastructure intelligence for security auditing?▼

You need passive OSINT infrastructure intelligence for security auditing when you must verify domain registration status, assess DNS records, and inspect SSL certificates without alerting targets or requiring external API keys.

Related Skills

Explore More Software Engineering Skills→
zerwizzerwiz

domain-intel

Your AI-powered command and data center for domain intelligence, delivering instant situational awareness and automated reporting to accelerate your next move.

Community
Intermediate
richardnguyen0715richardnguyen0715

domain-intel

...

Community
Intermediate
BishopCodesBishopCodes
1

Recon

Enumerate subdomains, DNS records, mail servers, and open ports.

Community
Advanced
guideopsguideops

recon-report

Automate OSINT gathering and port scanning into structured penetration test reports.

Community
Advanced