skills.rest
PandaWithAPlan
PandaWithAPlanCOMMUNITY
Explore all skills by this author →
GitHub

osint-tools-infra

Integrate OSINT tools for domain, IP, and infrastructure investigation.

2|Updated Jun 16, 2026
Search Tags:#osint#security tools#domain investigation#infrastructure analysis#ip reconnaissance
One-click install
npx skills add https://github.com/PandaWithAPlan/mas --skill osint-tools-infra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: osint-tools-infra
Source: https://github.com/PandaWithAPlan/mas/tree/main/osint-analyst/skills/osint-tools-infra
Command: npx skills add https://github.com/PandaWithAPlan/mas --skill osint-tools-infra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the complex task of gathering open-source intelligence (OSINT) by integrating various tools, making it easier to investigate domains, IPs, and infrastructure.

Core Features & Use Cases

  • Multi-Tool Integration: Combines a suite of OSINT frameworks and network reconnaissance tools to perform comprehensive research.
  • Domain/IP/Infrastructure Analysis: Offers insights into domains, IP addresses, and company infrastructure using platforms like Shodan, crt.sh, SecurityTrails, and more.
  • Use Case: Utilize this Skill to investigate a domain for potential vulnerabilities or to gather information on a company's online presence.

Quick Start

Run the osint-tools-infra skill to perform a comprehensive investigation on the domain 'example.com'.

Frequently Asked Questions about osint-tools-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform domain investigation and IP reconnaissance using OSINT tools?▼

Domain investigation and IP reconnaissance integrate multiple OSINT tools like Shodan, crt.sh, and SecurityTrails to gather open-source intelligence on domains, IPs, and infrastructure. This comprehensive research reveals a company's online presence and potential vulnerabilities.

What is the best way to gather open-source intelligence on a company's infrastructure?▼

Gathering open-source intelligence on infrastructure combines frameworks like DNSDumpster, BGPView, and theHarvester for multi-tool network reconnaissance. This integrated approach efficiently maps company infrastructure and discovers associated domains and IP addresses.

Do I need Python and specific APIs to run OSINT infrastructure analysis?▼

OSINT infrastructure analysis requires Python and the requests library to integrate platforms like Shodan and SecurityTrails. Specified APIs or tools are necessary to execute the scripts and perform comprehensive domain and IP reconnaissance.

Can I use this OSINT integration for investigating potential domain vulnerabilities?▼

Yes, you can use this OSINT integration to investigate domains for potential vulnerabilities by querying Shodan, crt.sh, and DNSDumpster. It aggregates infrastructure analysis data to help security analysts identify exposures and gather reconnaissance information.

How does combining Shodan, crt.sh, and SecurityTrails improve network reconnaissance?▼

Combining Shodan, crt.sh, and SecurityTrails improves network reconnaissance by aggregating diverse open-source intelligence data streams into a single workflow. This multi-tool integration provides deeper insights into domains, IP addresses, and underlying infrastructure.

Related Skills

zebbernzebbern
4.5k

Shodan Reconnaissance and Pentesting

Query Shodan hosts, ports, banners, and vulnerabilities via CLI and API.

Community
Intermediate
salmanabdurrahmansalmanabdurrahman

recon-asn-whois

Map an organization's network infrastructure using WHOIS, BGP, and certificate transparency data.

Community
Advanced
woohyun212woohyun212
21

cert-transparency

Query crt.sh Certificate Transparency logs to extract deduplicated subdomains.

Community
Intermediate
aivos-xieaivos-xie
1

osint

Conduct OSINT research on domains, IPs, social media, and documents.

Community
Advanced