skills.rest
samuelmukoti
samuelmukotiCOMMUNITY
Explore all skills by this author →
𝕏@samuelmukotiGitHub

domain-intel

Discover passive domain intelligence using Python's standard library.

Updated Apr 21, 2026
Search Tags:#dns#ssl#osint#whois#domain-intelligence#bulk-analysis#subdomain-discovery
One-click install
npx skills add https://github.com/samuelmukoti/myai-agent --skill domain-intel-samuelmukoti
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/samuelmukoti/myai-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/samuelmukoti/myai-agent --skill domain-intel-samuelmukoti

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance without external APIs or paid services, using only the Python standard library.

Core Features & Use Cases

  • Subdomain discovery, TLS certificate inspection, WHOIS lookups, DNS resolution, and domain availability checks.
  • Bulk analyses across multiple domains for quick footprint assessment and risk evaluation.
  • No API keys required; works offline-first where possible and leverages public data sources.

Quick Start

Run python3 domain_intel.py subdomains example.com to discover subdomains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without external APIs?▼

Passive domain reconnaissance without external APIs is achievable using Python's standard library to enumerate subdomains, inspect TLS certificates, retrieve WHOIS data, and resolve DNS records. The tool runs offline-first and requires no API keys.

Do I need API keys for WHOIS lookups and DNS resolution?▼

No API keys are required for WHOIS lookups or DNS resolution. The script leverages public data sources and Python's built-in modules to query domain intelligence directly, operating offline-first where possible.

Can I run bulk domain analysis across multiple domains?▼

Bulk domain analysis across multiple domains is supported for quick footprint assessment and risk evaluation. You can process several targets in one run to gather subdomains, DNS records, and TLS certificate data.

What is the best way to discover subdomains using Python stdlib?▼

Discovering subdomains using Python stdlib is done by running the CLI script with the subdomains command and target domain. It leverages public data sources to enumerate subdomains without needing third-party API authentication.

How does TLS certificate inspection work for domain intelligence?▼

TLS certificate inspection for domain intelligence works by connecting to the target domain and extracting certificate details using Python's built-in networking modules. This reveals registration and validity data without external services.

What format does the domain intelligence tool output?▼

The domain intelligence tool outputs structured JSON. This allows you to easily parse subdomain results, WHOIS records, and DNS resolution data for downstream processing or integration into security workflows.

Related Skills

Explore More Data & Analytics Skills→
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced
open-commanderopen-commander

security-ownership-map

...

Official
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
luisgustavooliveiraluisgustavooliveira

Recon

Perform passive and active infrastructure reconnaissance using DNS, WHOIS, and IPInfo.

Community
Advanced