AI导哈

其他

whois-dns-recon

useosint/skills

Look up domain registration and DNS records. Use when running WHOIS/RDAP, querying DNS records (A, MX, TXT, NS, SPF, DKIM, DMARC), finding a domain's registrant, nameservers, or mail setup, or resolving IPs and ASNs.

  • 599 次安装
  • 57 星标
  • 收录于

安装命令

npx skills add https://github.com/useosint/skills --skill whois-dns-recon

SKILL.md

WHOIS & DNS Recon

Registration and DNS records reveal ownership, infrastructure, and mail security posture — all passive.

WHOIS / RDAP

whois example.com          # registrar, dates, nameservers, registrant

RDAP is the structured successor — query https://rdap.org/domain/example.com. Registrant details are often GDPR-redacted; the registrar, creation date, and nameservers still pivot well. Historical WHOIS (WhoisXML, SecurityTrails) can show pre-redaction owners and registrant email — feed those to email-osint.

DNS records

dig example.com ANY +noall +answer
dig example.com MX +short           # mail servers
dig example.com TXT +short          # SPF, verification tokens
dig _dmarc.example.com TXT +short   # DMARC policy
  • A/AAAA → hosting IP; look up the ASN/host for shared-hosting neighbors.
  • MX → mail provider (Google/Microsoft/self-hosted).
  • TXT/SPF → third-party services the org uses (marketing, SaaS senders).
  • NS → DNS provider, and sometimes internal naming conventions.

Pivots

  • IP/ASN → shodan-censys-recon for exposed services.
  • Subdomains → certificate-transparency.
  • Registrant org/email → company-osint / email-osint.
  • Reused nameservers or MX across domains hint at the same owner.

相关 Skills

is-this-photo-realuseosint/skillsVerify whether an image or video is authentic, original and correctly captioned — provenance checks, error level analysis, noise and JPEG compression analysis, clone and copy-move detection, lighting and shadow consistency, C2PA Content Credentials, deepfake and AI-generation tells, and the honest limits of AI-detector tools. Use when fact-checking a photo or video, checking for a deepfake or AI-generated image, spotting manipulation, or testing whether footage is recycled or miscaptioned. Applies to KYC and onboarding fraud, insurance claim review, disinformation analysis, and evidence admissibility. Reference at useosint.com/skills/is-this-photo-real.设计与多媒体5.8万investigate-without-getting-madeuseosint/skillsInvestigator OPSEC — threat-model who might notice you, control your attribution surface across IP, ASN, browser and TLS fingerprint, timing and logged-in accounts, separate research identity from real identity, build and age a sockpuppet research persona, and choose between VPN, residential proxy and Tor. Use when setting up a research account, avoiding tipping off a subject, worrying about LinkedIn profile-view leakage, needing a burner phone or email, or hardening a research VM or browser profile. Applies to covert due diligence, insider-threat investigation, source protection in journalism, and law-enforcement online work. Reference at useosint.com/skills/investigate-without-getting-made.数据与研究5.8万what-leaked-about-youuseosint/skillsCheck and interpret data-breach exposure for an email, username, phone or name using Have I Been Pwned, the Pwned Passwords k-anonymity range API, DeHashed, IntelX and Snusbase. Use when checking breach or leak exposure, finding which services an account was registered with, interpreting a combolist or credential dump, assessing credential compromise, or auditing your own leaked personal data. Applies to incident response and account-takeover triage, executive and VIP protection, pre-employment and vendor risk screening, and personal privacy audits. Reference at useosint.com/skills/what-leaked-about-you.数据与研究5.8万find-the-original-imageuseosint/skillsReverse image search across Yandex, Google Lens, Bing Visual Search, TinEye and Baidu to find where a picture came from and who published it first. Use when reverse image searching, identifying a photo, face, logo, product, uniform or building, tracing a profile picture or avatar, finding the oldest copy of an image, checking whether a photo is stock or a repost, or reverse-searching a video by keyframes. Applies to romance and investment scam investigation, fake-profile and synthetic-identity detection, disinformation and media verification, counterfeit and brand-infringement work, and insurance claim review. Reference at useosint.com/skills/find-the-original-image.设计与多媒体5.7万x-ray-a-companyuseosint/skillsCorporate due-diligence workflow — resolve a brand or website to its registered legal entity, map group structure and beneficial ownership, profile officers and directors, enumerate the digital estate, and screen litigation, insolvency, procurement, sanctions, PEP and adverse media. Use when asked to check out, vet or research a company, verify a supplier or counterparty before signing or paying, or assess whether a business is real. Applies to vendor and third-party risk, KYC and KYB onboarding, M&A and investor diligence, procurement integrity, and shell-company assessment. Reference at useosint.com/skills/x-ray-a-company.智能体工作流2074read-deleted-pagesuseosint/skillsRecover deleted, edited or historical web content using the Wayback Machine and its CDX API, archive.today, Common Crawl and Memento/Timetravel. Use when a page is deleted, changed or 404s, checking what a site used to say, finding old team or staff pages, prior pricing, removed posts, pre-redaction wording or old contact details, enumerating every archived URL for a domain, or preserving evidence before it disappears. Applies to litigation and evidence preservation, regulatory and disclosure review, due diligence on a company's history, and journalism. Reference at useosint.com/skills/read-deleted-pages.后端与数据库2034