domain-intel

You can find subdomains without API keys by querying Certificate Transparency logs. This passive subdomain discovery method uses Python stdlib to identify subdomains without requiring external dependencies or authentication.

Yes, you can perform WHOIS lookups and DNS resolution on Windows, macOS, and Linux. The passive domain reconnaissance tool relies on Python stdlib, ensuring cross-platform compatibility without external dependencies.

You check domain availability passively by combining DNS, WHOIS, and SSL certificate signals. This approach queries multiple data sources to determine if a domain is registered without needing direct API authentication.

You can resolve A, AAAA, MX, NS, TXT, and CNAME DNS records using Python stdlib. The tool queries DNS servers directly to retrieve these record types for domain reconnaissance and security assessments.

SSL certificate inspection for domain reconnaissance retrieves TLS certificate details, including expiry dates and cipher suites. This passive method connects to the target domain to extract certificate information without external API keys.

Passive domain reconnaissance limitations include reliance on Certificate Transparency logs for subdomain discovery and potential incomplete data from WHOIS servers. It does not perform active port scanning or vulnerability exploitation during domain assessments.