skills.rest
kaminocorp
kaminocorpOFFICIAL
Explore all skills by this author →
Website𝕏@kaminocorpoGitHub

domain-intel

Collect passive domain intelligence using Python stdlib and output structured JSON.

228|35|Updated Mar 9, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#bulk-analysis#domain-intel
One-click install
npx skills add https://github.com/kaminocorp/hermes-alpha --skill domain-intel-kaminocorp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/kaminocorp/hermes-alpha/tree/main/hermes-agent/skills/research/domain-intel
Command: npx skills add https://github.com/kaminocorp/hermes-alpha --skill domain-intel-kaminocorp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance using only Python stdlib, enabling users to perform subdomain discovery, SSL inspection, WHOIS lookups, DNS record gathering, and domain availability checks without external APIs or dependencies.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs (crt.sh compatible)
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS lookup (registrar, creation/expiry dates, name servers)
  • DNS records (A, AAAA, MX, NS, TXT, CNAME)
  • Bulk analysis across multiple domains and parallel checks

Quick Start

Run python3 SKILL_DIR/scripts/domain_intel.py subdomains example.com to enumerate subdomains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate subdomains without external API keys or dependencies?▼

You can enumerate subdomains using Certificate Transparency logs via the crt.sh compatible interface. This passive subdomain discovery method queries public CT logs to find domain entries and outputs structured JSON results without requiring API keys.

Can I check SSL certificate expiry and issuer details using only Python standard libraries?▼

Yes, you can inspect SSL certificates using only Python stdlib. The SSL inspection feature extracts certificate expiry dates, issuer information, and Subject Alternative Names (SANs) directly through built-in network modules.

What is the best way to perform bulk WHOIS and DNS lookups across multiple domains?▼

The best way to perform bulk WHOIS and DNS lookups is using a zero-dependency CLI tool with a bulk subcommand. It executes parallel checks across multiple domains, gathering registrar data and DNS records (A, AAAA, MX, NS, TXT, CNAME).

How do I check domain availability without installing third-party Python packages?▼

You can check domain availability without third-party packages by using a Python stdlib CLI tool. It queries DNS resolution to determine if a domain is registered, returning structured JSON results for bulk availability checks.

Does passive domain reconnaissance work offline or require internet access for WHOIS queries?▼

Passive domain reconnaissance requires internet access for WHOIS queries and DNS resolution. Although the tool uses only Python stdlib and no external APIs, it still needs network connectivity to query WHOIS servers, Certificate Transparency logs, and DNS infrastructure.

Related Skills

Explore More Software Engineering Skills→
pinion05pinion05
3

elevenlabs-tts

Generate audio from text using the ElevenLabs API with configurable voices.

Community
Intermediate
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
Quill-AgentQuill-Agent
3

domain-intel

Perform passive domain reconnaissance including subdomain discovery, SSL inspection, WHOIS, DNS records, and availability checks.

Community
Advanced