skills.rest
vikrant-project
vikrant-projectCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Identifies subdomains, inspects SSL certificates, performs WHOIS lookups, resolves DNS records, and checks domain availability using Python stdlib and passive signals.

2|Updated Jun 8, 2026
Search Tags:#domain reconnaissance#subdomain discovery#DNS records#domain availability#WHOIS lookup#SSL certificate inspection
One-click install
npx skills add https://github.com/vikrant-project/devil-agent-ai-platform --skill domain-intel-vikrant-project
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/vikrant-project/devil-agent-ai-platform/tree/main/agent_core/optional-skills/research/domain-intel
Command: npx skills add https://github.com/vikrant-project/devil-agent-ai-platform --skill domain-intel-vikrant-project

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides passive domain reconnaissance capabilities, enabling users to discover subdomains, inspect SSL certificates, perform WHOIS lookups, and check domain availability without requiring API keys.

Core Features & Use Cases

  • Subdomain Discovery: Identifies subdomains using Certificate Transparency logs.
  • SSL Certificate Inspection: Analyzes TLS certificate details, including expiry, cipher, and SANs.
  • WHOIS Lookup: Retrieves domain registration information from WHOIS servers.
  • DNS Records: Resolves DNS records such as A, AAAA, MX, NS, TXT, and CNAME.
  • Domain Availability Check: Determines if a domain is registered using passive signals.
  • Use Case: Utilize this Skill to gather intelligence on a domain's infrastructure and presence on the web.

Quick Start

Run the domain-intel skill to find subdomains for example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find subdomains using Certificate Transparency logs without API keys?▼

Subdomain discovery uses Certificate Transparency logs to identify subdomains passively. This approach queries public CT logs via Python stdlib, requiring no API keys or active scanning to enumerate a domain's subdomains.

Can I check domain availability and retrieve WHOIS registration data using only Python stdlib?▼

Yes, domain availability checks and WHOIS lookups are performed using Python stdlib. The Skill queries WHOIS servers directly to retrieve registration information and uses passive signals to determine if a domain is registered.

How do I inspect SSL certificate details like expiry and SANs programmatically?▼

SSL certificate inspection analyzes TLS certificate details including expiry dates, cipher suites, and Subject Alternative Names (SANs). This is executed through Python stdlib to evaluate a domain's certificate configuration.

What DNS records can I resolve for a domain using passive reconnaissance?▼

Passive DNS reconnaissance resolves A, AAAA, MX, NS, TXT, and CNAME records. These DNS records are queried using Python stdlib to map a domain's infrastructure and presence.

Does passive domain reconnaissance require external dependencies or paid services?▼

No, passive domain reconnaissance operates entirely on Python stdlib without external dependencies. It leverages passive signals and public logs, requiring no API keys or paid services for infrastructure intelligence gathering.

What is the difference between passive domain reconnaissance and active scanning?▼

Passive domain reconnaissance gathers intelligence using public logs and DNS queries without sending direct probes to the target. Active scanning sends packets to the target's servers, whereas this approach relies on Certificate Transparency and WHOIS data.

Related Skills

Explore More Software Engineering Skills→
ragnarokhaaragnarokhaa
4

domain-intel

Identify subdomains, SSL details, WHOIS data, and DNS records using Python stdlib.

Community
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
GratefulJinx77GratefulJinx77

Recon

Perform passive and active network reconnaissance using WHOIS, DNS, and OSINT.

Community
Advanced