osint

Passive OSINT reconnaissance on domains, IPs, organizations

SKILL.md

GitHub

OSINT Reconnaissance

Passive intelligence gathering:

  • Domain WHOIS and DNS records
  • Subdomain enumeration
  • IP geolocation and ASN lookup
  • Certificate transparency
  • Email format discovery
  • GitHub/code leak search
  • Social media reconnaissance

Required Context

  1. Target: Domain, IP, organization, or individual
  2. Scope: What to focus on (infra, emails, leaks)
  3. Output: Format preference

Tools Used

whois, dig, subfinder, amass, shodan, geoiplookup, theHarvester, crt.sh

Example

/osint
Target: example.com
Focus: Infrastructure mapping, email format

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061