domain-intel

Name: domain-intel
Availability: InStock
Author: matlee0409

Perform passive OSINT on domains using Python standard library with zero dependencies.

Updated Aug 23, 2026

Search Tags:#dns #ssl #domain #osint #whois #subdomains

Ready to run

npx skills add https://github.com/matlee0409/cronus --skill domain-intel-matlee0409

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/matlee0409/cronus/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/matlee0409/cronus --skill domain-intel-matlee0409

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance using Python stdlib to discover subdomains, SSL data, WHOIS, DNS records, and domain availability with no external keys or API calls.

Core Features & Use Cases

Passive OSINT operations using only Python standard library (no dependencies) across domains
Subdomain discovery via Certificate Transparency data, SSL and DNS records
WHOIS lookups, DNS resolution, and passive domain availability signals
Real-world scenario: quickly assess a domain's exposure for security, branding, or infrastructure planning

Quick Start

Run the domain_intel.py CLI on a target domain to perform subdomains or dns checks and return JSON output.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How can I perform passive domain OSINT without installing external API dependencies?▼

You can perform passive domain OSINT using only the Python standard library with zero dependencies. This approach queries Certificate Transparency logs, WHOIS, and DNS records directly to discover subdomains and assess domain exposure without requiring external API keys.

How do I discover subdomains and inspect SSL certificates for a target domain?▼

You can discover subdomains and inspect SSL certificates by running a self-contained Python CLI script. It queries Certificate Transparency data and retrieves SSL information to map a domain's exposure, outputting the results as structured JSON.

Can I resolve DNS records and check domain availability using just Python standard library?▼

Yes, you can resolve DNS records and check domain availability using only the Python standard library. The script performs passive lookups across multiple domains to gather infrastructure signals without requiring third-party networking modules.

What is the best way to gather WHOIS data and assess domain exposure for security planning?▼

The best way to gather WHOIS data and assess domain exposure is running a zero-dependency Python script that aggregates subdomains, DNS records, and SSL inspection. It quickly outputs structured JSON for infrastructure planning and security analysis.

Do I need any API keys or external libraries to run subdomain discovery and WHOIS lookups?▼

No, you do not need any API keys or external libraries to run subdomain discovery and WHOIS lookups. The OSINT tooling relies entirely on the built-in Python standard library to fetch and parse domain availability signals.

Does domain-intel support automated JSON output for multiple domains?▼

Yes, domain-intel supports automated JSON output for multiple domains. It executes passive OSINT operations across several targets simultaneously, aggregating DNS, WHOIS, and SSL data into structured JSON for automated pipelines.