skills.rest
jleechanorg
jleechanorgOFFICIAL
Explore all skills by this author →
GitHub

domain-intel

Aggregate passive DNS, WHOIS, SSL, and certificate signals into structured JSON.

Updated Jun 28, 2026
Search Tags:#osint#dns-records#whois#subdomains#ssl-inspection#bulk-analysis#domain-intel
One-click install
npx skills add https://github.com/jleechanorg/hermes-agent --skill domain-intel-jleechanorg
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/jleechanorg/hermes-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/jleechanorg/hermes-agent --skill domain-intel-jleechanorg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance using Python stdlib. Subdomain discovery, SSL certificate inspection, WHOIS lookups, DNS records, domain availability checks, and bulk multi-domain analysis. No API keys required.

Core Features & Use Cases

  • Passive OSINT for domains using only Python stdlib (no external dependencies).
  • Subdomain discovery via Certificate Transparency logs, SSL certificate inspection, WHOIS data, DNS records, and bulk domain analysis.
  • Use Case: Quickly assemble a domain profile across multiple domains to assess exposure and ownership without API keys.

Quick Start

Scan example.com for subdomains, SSL, WHOIS, DNS, and availability in one go.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without API keys?▼

Passive domain reconnaissance without API keys is achieved by aggregating DNS, WHOIS, and SSL certificate data using Python standard library modules. This Skill compiles subdomain discovery and infrastructure signals into a structured JSON output without requiring external dependencies.

What is the best way to gather DNS records and WHOIS data for multiple domains in bulk?▼

Bulk domain analysis for DNS records and WHOIS data is performed by running the Python scripts across multiple domains simultaneously. The process outputs deterministic JSON containing the aggregated infrastructure profiles for automated pipeline consumption.

Can I discover subdomains using Certificate Transparency logs with just Python stdlib?▼

Subdomain discovery via Certificate Transparency logs is fully supported using only Python stdlib. The Skill queries SSL certificate data and aggregates passive OSINT signals to identify subdomains without needing any external packages or API authentication.

Does passive OSINT domain intelligence work on Windows, macOS, and Linux environments?▼

Passive OSINT domain intelligence works across Linux, macOS, and Windows environments. Because the implementation relies exclusively on Python standard library modules, it runs consistently across these operating systems without installation barriers.

How do I inspect SSL certificates to assess domain exposure during an investigation?▼

SSL certificate inspection to assess domain exposure is handled by querying certificate data during the scan. The Skill aggregates these passive signals alongside DNS and WHOIS data to build a comprehensive structured domain profile in JSON format.

What are the limitations of using Python stdlib for domain intelligence gathering?▼

Domain intelligence gathering with Python stdlib is limited to passive OSINT collection from public sources like DNS and SSL logs. It does not perform active scanning, port enumeration, or vulnerability detection, and relies entirely on publicly available certificate transparency data.

Related Skills

Explore More Education & Research Skills→
afel6afel6

domain-intel

Identify subdomains, SSL details, WHOIS data, DNS records, and domain availability via passive OSINT.

Community
Advanced
ys6448761-hueys6448761-hue

comi-orchestrator

Centralize Aurora5 progress tracking and generate automated daily status reports.

Community
Advanced
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
transilienceaitransilienceai
462

domain-assessment

Coordinate subdomain discovery and port scanning to build a domain attack surface inventory.

Official
Basic