skills.rest
jason660519
jason660519COMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Perform passive OSINT on domains using only Python stdlib.

Updated May 11, 2026
Search Tags:#dns#osint#whois#ssl-inspection#subdomain-discovery#domain-intel
One-click install
npx skills add https://github.com/jason660519/Project-Manager --skill domain-intel-jason660519
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/jason660519/Project-Manager/tree/main/hermes-agent/optional-skills/research/domain-intel
Command: npx skills add https://github.com/jason660519/Project-Manager --skill domain-intel-jason660519

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive OSINT for domain intelligence gathering using only Python's standard library. Gather signals such as subdomains, SSL details, WHOIS, DNS records, and domain availability without external dependencies or API keys.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs using crt.sh.
  • SSL certificate inspection (expiry, issuer, SANs, and TLS details).
  • WHOIS lookup for domain registration data across 100+ TLDs.
  • DNS records resolution (A, AAAA, MX, NS, TXT, CNAME) using system DNS and Google DoH.
  • Domain availability signals via passive checks (DNS, WHOIS, SSL heuristics).
  • Bulk analysis across multiple domains with parallel processing.
  • JSON-formatted output suitable for ingestion into dashboards or tools.

Quick Start

Run domain-intel to perform subdomain, ssl, whois, dns, and availability checks on target domains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive OSINT subdomain discovery without external API keys?▼

Passive OSINT subdomain discovery is achievable using only Python's standard library. You can enumerate subdomains via Certificate Transparency logs from crt.sh without requiring external API dependencies or keys.

How do I check SSL certificate details and TLS expiration for a domain using Python?▼

SSL certificate inspection uses Python stdlib to extract expiry dates, issuer information, and Subject Alternative Names. It safely retrieves TLS details directly from the target domain's network endpoint.

Can I resolve DNS records like MX, TXT, and CNAME without installing third-party libraries?▼

DNS records including A, AAAA, MX, NS, TXT, and CNAME can be resolved without third-party libraries. The tool uses system DNS and Google DNS-over-HTTPS to query records using only Python stdlib.

Does Python stdlib WHOIS lookup support domain registration checks across multiple TLDs?▼

WHOIS lookup supports domain registration data retrieval across 100+ TLDs using Python stdlib. It performs passive checks to gather domain availability signals without external dependencies.

What is the best way to run bulk domain intelligence analysis on multiple targets?▼

Bulk domain intelligence analysis across multiple targets is handled via parallel processing. It outputs structured JSON formatted results suitable for direct ingestion into security dashboards.

Are there limitations to gathering domain availability signals using only passive OSINT checks?▼

Domain availability signals gathered via passive OSINT rely on DNS, WHOIS, and SSL heuristics without querying registrar APIs directly. This approach avoids external dependencies but limits real-time registration availability accuracy.

Related Skills

Explore More Data & Analytics Skills→
HarriesHarries

domain-intel

Gather subdomains, SSL data, WHOIS, DNS, and availability using Python standard library.

Community
Intermediate
dapperdiversdapperdivers
1

threat-intel-aggregator

Aggregate threat intelligence feeds and vulnerability data into daily security briefings.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
afel6afel6

domain-intel

Identify subdomains, SSL details, WHOIS data, DNS records, and domain availability via passive OSINT.

Community
Advanced