skills.rest
overviewlabs
overviewlabsCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Perform passive domain reconnaissance and emit structured JSON using Python's standard library.

Updated Apr 10, 2026
Search Tags:#dns#ssl#osint#bulk#whois#subdomains#domain-intel
One-click install
npx skills add https://github.com/overviewlabs/WHOX --skill domain-intel-overviewlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/overviewlabs/WHOX/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/overviewlabs/WHOX --skill domain-intel-overviewlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance without relying on paid APIs or external services.

Core Features & Use Cases

  • Passive OSINT with zero external dependencies
  • Subdomain discovery, SSL inspection, WHOIS, DNS, and domain availability signals
  • Bulk analysis across multiple domains with JSON output for automation

Quick Start

Run domain_intel.py with the subdomains command to enumerate subdomains for a target domain.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without using paid APIs?▼

Passive domain reconnaissance can be performed using only Python's standard library to enumerate subdomains, inspect SSL certificates, query WHOIS data, and check DNS records without requiring any paid APIs or API keys.

Can I run bulk WHOIS and DNS lookups across multiple domains without external dependencies?▼

Yes, bulk WHOIS and DNS lookups can be executed across multiple domains simultaneously. The process uses zero external dependencies, requiring no API keys, and outputs structured JSON for automation.

How do I discover subdomains using only standard Python libraries?▼

Subdomain discovery is achieved by running a Python script that relies solely on the standard library. It passively enumerates subdomains for a target domain without needing third-party services or API authentication.

What is passive OSINT domain analysis and how does it structure SSL and certificate data?▼

Passive OSINT domain analysis is the collection of domain intelligence without active scanning. It structures SSL certificate inspection, WHOIS records, and DNS data into structured JSON outputs for automated processing.

Do I need any API keys to query SSL certificates and domain availability signals?▼

No, you do not need any API keys to query SSL certificates or domain availability signals. The entire process is designed to work with zero external dependencies and requires no paid API services.

What are the limitations of passive domain intelligence gathering with no external services?▼

Limitations of passive domain intelligence gathering include relying entirely on standard Python libraries and avoiding active scanning. It focuses on publicly available signals like DNS and SSL certificates rather than intrusive probing.

Related Skills

Explore More Data & Analytics Skills→
valITinovalITino
7

osint-gathering

Collect passive OSINT data on target domains via public sources.

Community
Advanced
Yangel-hideYangel-hide

domain-intel

Collect passive domain intelligence using Python's standard library and output structured JSON.

Community
Intermediate
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
GratefulJinx77GratefulJinx77

Recon

Perform passive and active network reconnaissance using WHOIS, DNS, and OSINT.

Community
Advanced