skills.rest
kotakbiasa
kotakbiasaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

domain-intel

Gather subdomains, SSL data, WHOIS, and DNS records using Python stdlib.

Updated Aug 23, 2026
Search Tags:#dns#ssl#domain#osint#whois#subdomains
One-click install
npx skills add https://github.com/kotakbiasa/hermes-agent --skill domain-intel-kotakbiasa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/kotakbiasa/hermes-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/kotakbiasa/hermes-agent --skill domain-intel-kotakbiasa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance using only Python stdlib. Zero dependencies. Works on Linux, macOS, and Windows.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs
  • SSL certificate inspection (expiry, issuer, SANs, cipher)
  • WHOIS lookup (registrar, dates, name servers)
  • DNS records (A/AAAA/MX/NS/TXT/CNAME)
  • Bulk analysis across multiple domains

Quick Start

Run the domain_intel.py script with the bulk command to analyze a list of target domains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather subdomains and SSL certificate data without installing external Python packages?▼

You can gather subdomains and SSL certificate data using a passive domain intelligence script built entirely on Python standard library modules. It requires zero external dependencies or API keys, returning structured JSON output for immediate security assessments.

Can I perform bulk WHOIS and DNS lookups across multiple domains at once?▼

Yes, bulk WHOIS and DNS lookups across multiple domains are supported. The script processes target lists to retrieve registrar dates, name servers, and A/AAAA/MX/NS/TXT/CNAME records without requiring API keys.

What is passive domain reconnaissance and how do Certificate Transparency logs help find subdomains?▼

Passive domain reconnaissance gathers infrastructure data without actively scanning the target. Certificate Transparency logs are queried passively to discover subdomains, alongside SSL inspection and WHOIS data, returning structured JSON for brand monitoring and inventory.

Does this passive domain intelligence tool work on Windows, macOS, and Linux environments?▼

Yes, passive domain intelligence gathering works on Linux, macOS, and Windows. Because it relies solely on the Python standard library for network I/O and TLS inspection, no environment-specific dependency installation is required.

What kind of SSL certificate details can I extract using only the Python standard library?▼

Using the Python standard library, you can extract SSL certificate details including expiry dates, issuer information, Subject Alternative Names, and cipher data during passive domain intelligence gathering for security assessments.

Related Skills

Explore More Education & Research Skills→
jason660519jason660519

domain-intel

Perform passive OSINT on domains using only Python stdlib.

Community
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
BishopCodesBishopCodes
1

Investigation

Conduct structured OSINT investigations on individuals and companies using public data sources.

Community
Advanced