recon-a-domain-passively

Recon a domain passively Turn one domain into a defensible map of an organization's internet-facing estate plus the owner behind it. The techniques live in other skills; what this workflow contributes is the order , the inventory , and the stopping rule . Two failure modes to avoid from the start: enumerating for hours and producing 400 hostnames with no attribution, dates or priority, which is not a map; and drifting active without noticing, because one probe "just to check if it's up" ends the passive claim. Decide the passive boundary before step 2, not during it. Ordering logic Each stage feeds the next, and the sequence is cheapest-and-quietest first: Show more Installs 975 Repository useosint/osint-skills GitHub Stars 4 First Seen 7 days ago Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Warn