skills.rest
SriRamkunamsetty
SriRamkunamsettyCOMMUNITY
Explore all skills by this author →
𝕏@SriRam41258GitHub

domain-intel

Perform passive domain intelligence gathering using Python's standard library.

Updated May 20, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#bulk-analysis#domain-intel
One-click install
npx skills add https://github.com/SriRamkunamsetty/SITA2.0-HermesAgent --skill domain-intel-sriramkunamsetty
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/SriRamkunamsetty/SITA2.0-HermesAgent/tree/main/hermes-agent/optional-skills/research/domain-intel
Command: npx skills add https://github.com/SriRamkunamsetty/SITA2.0-HermesAgent --skill domain-intel-sriramkunamsetty

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance using Python stdlib to perform OSINT without external services or dependencies, enabling quick visibility into a domain's surface.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs (crt.sh) to reveal domain surface
  • SSL certificate inspection for expiry, cipher, SANs, and issuer
  • WHOIS lookup for registrar, creation/expiry dates, and name servers
  • DNS records resolution (A, AAAA, MX, NS, TXT, CNAME) using system DNS and DoH
  • Domain availability signals via passive checks (DNS + WHOIS + SSL)
  • Bulk analysis across multiple domains with parallel checks and JSON output

Quick Start

Invoke the CLI with a subcommand and a target domain to receive structured JSON results.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without installing external dependencies?▼

Passive domain reconnaissance can be performed using Python's standard library to query Certificate Transparency logs, WHOIS, and DNS without external dependencies. It uses socket-based queries and concurrency to output structured JSON results.

Can I do bulk OSINT subdomain discovery across multiple domains at once?▼

Yes, bulk OSINT subdomain discovery across multiple domains is supported. It performs parallel checks using concurrent processing and outputs all aggregated domain intelligence results into a single structured JSON file.

Does this DNS resolution and WHOIS lookup tool work on Windows, macOS, and Linux?▼

DNS resolution and WHOIS lookup work across Linux, macOS, and Windows. The tool uses Python's standard library for socket-based system DNS queries and DNS over HTTPS, ensuring cross-platform compatibility without requiring external services.

What is the best way to check SSL certificate expiry and gather domain availability signals?▼

Checking SSL certificate expiry and gathering domain availability signals is best done via passive inspection of SSL certificates, WHOIS records, and DNS resolution. This approach aggregates expiry dates, SANs, and registrar data into structured JSON.

Related Skills

Explore More Data & Analytics Skills→
twjarviszyra-webtwjarviszyra-web
3

domain-intel

Extract subdomains, DNS records, WHOIS data, and SSL certificate details from domains.

Community
Intermediate
mcouthonmcouthon
77

security-review

Analyze code changes to identify vulnerabilities and map attack surfaces.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced