skills.rest
zhouboyu-xreal
zhouboyu-xrealCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Identify subdomains, inspect SSL certificates, perform WHOIS lookups, and resolve DNS records.

Updated Jun 9, 2026
Search Tags:#security audit#domain reconnaissance#subdomain discovery#WHOIS lookup#SSL certificate inspection
One-click install
npx skills add https://github.com/zhouboyu-xreal/Hermes-Memory --skill domain-intel-zhouboyu-xreal
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/zhouboyu-xreal/Hermes-Memory/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/zhouboyu-xreal/Hermes-Memory --skill domain-intel-zhouboyu-xreal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a way to perform passive domain reconnaissance without relying on API keys, making it ideal for security auditing and domain research.

Core Features & Use Cases

  • Subdomain Discovery: Find subdomains by querying Certificate Transparency logs.
  • SSL Certificate Inspection: Analyze TLS certificate details like expiry, cipher, and issuer.
  • WHOIS Lookup: Retrieve domain registration information.
  • DNS Records: View DNS records for a domain.
  • Domain Availability Check: Determine if a domain is registered.
  • Use Case: Conduct a thorough security audit on a domain by using this Skill to identify all subdomains, inspect SSL certificates, and check domain availability.

Quick Start

Run the domain-intel skill with 'domain-intel available example.com' to check the availability of a domain.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find subdomains without an API key?▼

You can find subdomains without an API key by querying Certificate Transparency logs. This passive reconnaissance method discovers registered subdomains for a target domain without requiring external authentication or paid services.

Can I perform a WHOIS lookup and check domain availability without authentication?▼

Yes, you can perform WHOIS lookups and check domain availability without authentication. This Skill retrieves domain registration information and determines registration status directly without requiring any API keys.

How do I inspect SSL certificates for a security audit?▼

To inspect SSL certificates for a security audit, analyze TLS certificate details including expiry dates, cipher suites, and issuer information. This helps identify expired or weakly configured certificates across discovered subdomains.

What is the best way to resolve DNS records for domain research?▼

The best way to resolve DNS records for domain research is to query the domain directly to view all configured DNS records. This passive method retrieves DNS configurations without interacting with the target server.

Does passive domain reconnaissance require any external dependencies?▼

Passive domain reconnaissance with this Skill requires no external dependencies or API keys. It performs subdomain discovery, WHOIS lookups, and DNS resolution using built-in scripts without needing additional environment setup.

Related Skills

icyzhicyzh
1

domain-intel

Query certificate transparency logs, WHOIS servers, and DNS records for passive domain reconnaissance.

Community
Intermediate
ragnarokhaaragnarokhaa
4

domain-intel

Identify subdomains, SSL details, WHOIS data, and DNS records using Python stdlib.

Community
Intermediate
HelloEverybobyHelloEveryboby
17

SecRadar

Conduct high-concurrency SYN port scans with Token Bucket rate limiting.

Community
Intermediate
AeonDaveAeonDave
15

amass

Enumerate subdomains and map attack surfaces for a domain.

Community
Advanced