skills.rest
wwwillott
wwwillottCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Collect subdomains, SSL data, WHOIS, DNS records, and availability via Python stdlib.

Updated Aug 23, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#domain-intel
One-click install
npx skills add https://github.com/wwwillott/jobnimbus --skill domain-intel-wwwillott
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/wwwillott/jobnimbus/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/wwwillott/jobnimbus --skill domain-intel-wwwillott

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain intelligence gathering requires multiple tools and API access; this skill provides a lightweight, dependency-free approach to gather essential domain signals from public sources.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS lookup and domain metadata
  • DNS records resolution (A/AAAA/MX/NS/TXT/CNAME)
  • Bulk analysis across multiple domains for rapid triage
  • Output is structured JSON for easy integration

Quick Start

Run python3 optional-skills/research/domain-intel/scripts/domain_intel.py subdomains example.com

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather passive domain intelligence without installing external dependencies?▼

Passive domain intelligence gathering can be performed using only the Python standard library to collect subdomains, SSL cert data, WHOIS, and DNS records without requiring any API keys or external dependencies.

Can I run bulk DNS and WHOIS lookups across multiple domains at once?▼

Bulk DNS and WHOIS lookups are supported across multiple domains for rapid triage, outputting structured JSON results that consolidate domain availability signals and metadata for incident response.

How do I find subdomains using Certificate Transparency logs?▼

Subdomain discovery queries Certificate Transparency logs passively via the Python stdlib, extracting and returning identified subdomains in a structured JSON format for security research.

What's the best way to check SSL certificate expiry and issuer details from the command line?▼

SSL certificate inspection retrieves expiry dates, issuer information, and Subject Alternative Names (SANs) directly through a stdlib-based Python script, outputting the details as structured JSON.

Do I need API keys to resolve A, AAAA, MX, NS, and TXT DNS records?▼

No API keys are needed to resolve A, AAAA, MX, NS, TXT, and CNAME DNS records, as the domain intelligence script operates entirely using Python's built-in standard library.

Are there limitations to dependency-free OSINT domain analysis?▼

Dependency-free OSINT domain analysis relies entirely on passive public sources and the Python stdlib, meaning it does not perform active scanning or exploit third-party API rate limits for deeper data.

Related Skills

Explore More Data & Analytics Skills→
afel6afel6

domain-intel

Identify subdomains, SSL details, WHOIS data, DNS records, and domain availability via passive OSINT.

Community
Advanced
SherifEldeebSherifEldeeb
5

forensic-reporting

Generate formal forensic reports from investigation findings and evidence.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
jleechanorgjleechanorg

domain-intel

Aggregate passive DNS, WHOIS, SSL, and certificate signals into structured JSON.

Official
Intermediate