skills.rest
zeronx798
zeronx798COMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Perform passive domain reconnaissance using Python standard library modules.

Updated Jul 13, 2026
Search Tags:#reconnaissance#dns#ssl#domain#osint#whois
One-click install
npx skills add https://github.com/zeronx798/demo-hermes-agent --skill domain-intel-zeronx798
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/zeronx798/demo-hermes-agent/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/zeronx798/demo-hermes-agent --skill domain-intel-zeronx798

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill solves the need for quick, reliable infrastructure intelligence without relying on external APIs, paid subscriptions, or complex security tools.

Core Features & Use Cases

  • Passive Reconnaissance: Perform subdomain discovery, SSL inspection, and WHOIS lookups without triggering active security alerts.
  • Bulk Analysis: Run parallel checks across multiple domains to audit infrastructure or verify domain availability.
  • Use Case: Quickly verify if a domain is registered, check when its SSL certificate expires, or map out its DNS records during a security audit or project setup.

Quick Start

Use the domain-intel skill to perform a full DNS and SSL check on example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without API keys?▼

Passive domain reconnaissance can be performed using only the Python standard library to resolve DNS records, inspect SSL certificates, and run WHOIS lookups without requiring external API keys.

What is the best way to check SSL certificate expiration for multiple domains?▼

The best way to check SSL certificate expiration across multiple domains is by running parallel bulk analysis scripts that passively inspect certificates to audit infrastructure and verify domain availability.

Can I run DNS record resolution and WHOIS lookups on Windows?▼

Yes, DNS record resolution and WHOIS lookups are fully supported on Windows, as well as Linux and macOS, because the scripts operate using only built-in Python standard library modules.

Does passive subdomain discovery require any external dependencies?▼

No, passive subdomain discovery requires zero external dependencies because the tool is built entirely on the Python standard library, ensuring reliable infrastructure auditing without complex security tool installations.

How do I verify if a domain is registered without triggering security alerts?▼

You can verify if a domain is registered by performing passive OSINT techniques like WHOIS lookups and DNS record resolution, which gather infrastructure intelligence without triggering active security alerts.

Related Skills

Explore More Software Engineering Skills→
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced
projectedanxprojectedanx
1

domain-intel

Perform passive domain reconnaissance using standard Python networking libraries.

Community
Intermediate
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
mishahaninmishahanin
10

osint-advanced

Query sanctions lists, corporate registries, and breach databases to generate structured intelligence briefs.

Community
Advanced