skills.rest
projectedanx
projectedanxCOMMUNITY
Explore all skills by this author →
𝕏@ALifeInArtifyAIGitHub

domain-intel

Perform passive domain reconnaissance using standard Python networking libraries.

1|Updated May 12, 2026
Search Tags:#reconnaissance#cybersecurity#dns#ssl#osint#whois
One-click install
npx skills add https://github.com/projectedanx/hermes-agent --skill domain-intel-projectedanx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/projectedanx/hermes-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/projectedanx/hermes-agent --skill domain-intel-projectedanx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill solves the challenge of gathering infrastructure intelligence about domains without triggering active security alerts or requiring external API keys.

Core Features & Use Cases

  • Passive Reconnaissance: Perform subdomain discovery, SSL inspection, and WHOIS lookups using only standard Python libraries.
  • Infrastructure Auditing: Quickly verify DNS records, check SSL certificate health, and assess domain availability.
  • Use Case: Use this tool to audit a list of domains for expired SSL certificates or to map out the subdomains of a target organization during a security assessment.

Quick Start

Use the domain-intel skill to perform a full DNS and SSL check on example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without triggering security alerts?▼

Passive domain reconnaissance avoids active port scanning by using standard Python networking libraries to query public DNS records, SSL certificates, and WHOIS data, ensuring stealthy and reliable intelligence gathering without triggering network defenses.

Can I discover subdomains and check SSL certificate health without external API keys?▼

Yes, you can discover subdomains and inspect SSL certificates without external API keys. The tool relies solely on standard Python libraries to resolve DNS records and analyze certificate data for infrastructure auditing.

What is the best way to audit a list of domains for expired SSL certificates?▼

The best way to audit domains for expired SSL certificates is to run a passive SSL inspection script that queries certificate data directly, allowing you to quickly verify certificate health and assess domain availability across multiple targets.

Does passive OSINT reconnaissance work for mapping out an organization's subdomains?▼

Passive OSINT reconnaissance works effectively for mapping subdomains. It queries public DNS infrastructure and resolves DNS records to enumerate subdomains stealthily, making it ideal for security assessments without active network probing.

Why use passive DNS and WHOIS lookups instead of active network scanning?▼

Passive DNS and WHOIS lookups are used instead of active scanning to ensure stealthy data collection. By avoiding active port scanning, you gather infrastructure intelligence reliably without triggering security alerts or requiring external API dependencies.

Related Skills

Explore More Software Engineering Skills→
zerwizzerwiz

domain-intel

Your AI-powered command and data center for domain intelligence, delivering instant situational awareness and automated reporting to accelerate your next move.

Community
Intermediate
cwinvestmentscwinvestments
412

memstack-deployment-domain-ssl

Configure DNS records, SSL certificates, and HTTPS for custom domains.

Community
Intermediate
RooseveltAdvisorsRooseveltAdvisors
1

Recon

Automate network reconnaissance for domains, IPs, and netblocks.

Community
Advanced
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced