skills.rest
tcole333
tcole333COMMUNITY
Explore all skills by this author →
GitHub

investigate-infra

Maps digital infrastructure using public records, certificate logs, and DNS data.

Updated Feb 18, 2026
Search Tags:#network mapping#security auditing#digital forensics#passive reconnaissance#infrastructure investigation
One-click install
npx skills add https://github.com/tcole333/ithildin --skill investigate-infra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: investigate-infra
Source: https://github.com/tcole333/ithildin/tree/main/.claude/skills/investigate-infra
Command: npx skills add https://github.com/tcole333/ithildin --skill investigate-infra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires shodan, crt.sh, wayback-machine, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs passive digital infrastructure investigation to uncover hidden connections, such as shared hosting, certificates, and analytics, across domains, IPs, organizations, and individuals.

Core Features & Use Cases

  • Infrastructure Mapping: Discovers and maps hosting, certificates, DNS topology, and deployment patterns.
  • Passive Reconnaissance: Utilizes publicly observable signals to gather facts about digital footprints.
  • Use Case: Investigate a company's digital infrastructure to uncover hidden relationships and potential vulnerabilities.

Quick Start

Run the 'investigate-infra' skill with the target domain or IP, e.g., /investigate-infra example.com.

Frequently Asked Questions about investigate-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map digital infrastructure using passive reconnaissance?▼

Passive reconnaissance maps digital infrastructure by querying public records, certificate transparency logs, and DNS topology to uncover hosting patterns and shared resources without active scanning. This approach gathers observable facts about a target's digital footprint.

What is the best way to investigate hidden connections across domains and IPs?▼

Investigating hidden connections across domains and IPs involves querying certificate transparency logs and historical archives to reveal shared hosting, certificates, and analytics. This method exposes relationships between organizations, individuals, and their digital assets.

Do I need Shodan and crt.sh to perform security auditing on a target domain?▼

Security auditing for infrastructure investigation requires Shodan, crt.sh, and Wayback Machine to retrieve public records and certificate transparency data. These dependencies provide the necessary data retrieval capabilities for discovering and mapping digital footprints.

Can I use certificate transparency logs for digital forensics and infrastructure mapping?▼

Certificate transparency logs support digital forensics by revealing historical SSL/TLS certificate registrations across domains. Querying these logs maps DNS topology and exposes hidden subdomains and organizational relationships for security auditing purposes.

What are the limitations of passive reconnaissance for infrastructure investigation?▼

Passive reconnaissance limitations include reliance on publicly available historical data from sources like Wayback Machine and crt.sh, meaning recently deployed infrastructure or unindexed assets may remain hidden. It cannot discover resources lacking public DNS or certificate records.

Related Skills

Explore More Software Engineering Skills→
hpsgdhpsgd

domain-intel

Generate a structured Markdown domain intelligence report from passive public sources.

Official
Advanced
do360nowdo360now

dns-security

Analyze DNS configuration files, DNSSEC signing, resolver validation, and encryption deployment.

Community
Advanced
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
briiirussellbriiirussell
345

osint-recon

Correlate public-source intelligence into structured OSINT reports with confidence scoring.

Community
Intermediate