skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

recon-asn-whois

Map an organization's network infrastructure using WHOIS, BGP, and certificate transparency data.

Updated Jul 30, 2026
Search Tags:#reconnaissance#infrastructure#whois#network-mapping#asn#passive-discovery
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-asn-whois
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-asn-whois
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/recon-asn-whois
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-asn-whois

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of identifying an organization's digital footprint by mapping its network infrastructure, IP ranges, and domain registration details from public sources without triggering active security alerts.

Core Features & Use Cases

  • Network Mapping: Automatically discovers ASN numbers, CIDR blocks, and IP prefixes associated with a target organization.
  • Infrastructure Discovery: Identifies origin servers behind CDNs and reveals shadow IT through reverse WHOIS and certificate transparency logs.
  • Use Case: During a security assessment, use this skill to define the authorized attack surface by correlating domain names with their underlying network ownership and historical IP data.

Quick Start

Use the recon-asn-whois skill to map the network infrastructure and identify origin IP candidates for the target domain example.com.

Frequently Asked Questions about recon-asn-whois

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map an organization's network infrastructure without triggering active security alerts?▼

You can map an organization's network infrastructure passively by querying public WHOIS, BGP, and certificate transparency data sources to identify ASN numbers, CIDR blocks, and IP prefixes without active scanning.

What is passive reconnaissance for asset discovery?▼

Passive reconnaissance for asset discovery is the process of querying public WHOIS and certificate transparency logs to map an organization's IP address space and domain registration footprint without sending direct probes.

How do I find origin IP candidates behind a CDN using reverse WHOIS?▼

Find origin IP candidates behind a CDN by querying reverse WHOIS and certificate transparency logs to correlate domain names with historical IP data and underlying network ownership.

Can I discover shadow IT infrastructure using certificate transparency logs?▼

Yes, you can discover shadow IT infrastructure by querying certificate transparency logs and reverse WHOIS data to reveal undocumented domains and IP address space associated with the target organization.

What is the best way to define an authorized attack surface during a security assessment?▼

Define an authorized attack surface by correlating target domain names with their underlying network ownership, ASN numbers, and historical IP data gathered from public BGP and WHOIS sources.

Does passive network mapping require active scanning tools or dependencies?▼

No, passive network mapping requires no active scanning tools or dependencies, relying solely on querying public WHOIS, BGP, and certificate transparency data sources to generate a comprehensive network asset map.

Related Skills

Explore More Software Engineering Skills→
hoanghn61hoanghn61

certificate-transparency

Query crt.sh Certificate Transparency logs and extract deduplicated subdomains from SANs.

Community
Intermediate
wgpsecwgpsec
1.6k

naabu-portscan

Scan hosts and CIDR ranges for open ports with JSON output.

Official
Intermediate
Quill-AgentQuill-Agent
3

domain-intel

Perform passive domain reconnaissance including subdomain discovery, SSL inspection, WHOIS, DNS records, and availability checks.

Community
Advanced
protoLabsAIprotoLabsAI
2

recon-sweep

Perform passive and scoped active reconnaissance on network targets and domains.

Official
Advanced