Perform passive domain intelligence using only Python stdlib.
npx skills add https://github.com/KarlinskyS/hermesSkills --skill domain-intel-karlinskys
Please help me install this Agent Skill. Skill: domain-intel Source: https://github.com/KarlinskyS/hermesSkills/tree/main/research/domain-intel Command: npx skills add https://github.com/KarlinskyS/hermesSkills --skill domain-intel-karlinskys
Passive domain reconnaissance using only Python stdlib. Zero dependencies. Zero API keys. Works on Linux, macOS, and Windows.
Run the domain_intel.py script with a target domain or a list of domains to perform all supported checks
High-intent search queries and answers about installing and using this skill.
Subdomain discovery is performed passively by querying Certificate Transparency logs via crt.sh. This approach requires no external APIs or paid tools, using only Python stdlib to map subdomains for security audits and infrastructure mapping.
WHOIS and DNS lookups run with zero Python dependencies, requiring only the standard library. The tool performs DoH-based DNS resolution and WHOIS queries across 100+ TLDs, working on Linux, macOS, and Windows without external packages.
Passive domain availability checking combines DNS, WHOIS, and SSL certificate signals to heuristically determine if a domain is registered. This avoids active probing or zone transfer attempts, relying entirely on deterministic JSON outputs from standard Python libraries.
SSL certificate inspection extracts expiry dates, cipher suites, SANs, and issuer information through TLS inspection. Bulk analysis supports multiple domains in parallel, delivering deterministic JSON outputs for security audits and brand monitoring.
Domain reconnaissance works on Linux, macOS, and Windows without requiring a specific operating system. Built entirely on Python stdlib, the tool performs crt.sh lookups, TLS inspection, and DoH-based DNS resolution across all major platforms.
Passive domain intelligence relies on signals from Certificate Transparency logs, TLS inspection, WHOIS, and DoH-based DNS resolution. It avoids active scanning, meaning it cannot discover non-public subdomains or internal network infrastructure not exposed through these channels.
aayushsoamPerform passive domain reconnaissance using Python stdlib without API keys.
GregsGreyCodeFind subdomains, SSL certificates, WHOIS, and DNS records using Python's standard library.
ArianHobson333Identify subdomains, ports, endpoints, APIs, and attack surfaces.
AeonDaveEnumerate subdomains passively via OSINT sources with optional brute-force wordlists.
