Domain Intelligence Tool
An automated Python & Flask framework designed to enumerate external attack surfaces, resolve full DNS topologies, grade HTTP defensive headers, and catalog exposed assets for security auditors.
System Architecture & Capabilities
During penetration testing and red teaming engagements, manual surface reconnaissance often consumes up to 40% of assessment time. The Domain Intelligence Tool was built to automate the passive and active correlation of external domain footprints into an actionable, web-based intelligence dashboard.
DNS & Subdomain Discovery
Queries A, AAAA, MX, NS, TXT, and SOA records via dnspython, while integrating DNSDumpster endpoints to discover obscure staging subdomains, development clusters, and load balancers.
HTTP Security Header Grading
Evaluates response headers against OWASP secure headers standards, testing for Content-Security-Policy (CSP), Strict-Transport-Security (HSTS), X-Content-Type-Options, and Permissions-Policy.
SSL/TLS Certificate Inspection
Inspects X.509 certificate chains, verifies expiration timestamps, issuer authorities, Subject Alternative Names (SANs), and cryptographic cipher suite strengths.
Network Geolocation & Ports
Resolves hosting provider ASN numbers, IP geolocation coordinates, and maps common web service ports (80, 443, 8080, 8443) using non-destructive TCP SYN checks.
In compliance with strict AppSec standards, all external API keys (DNSDumpster, VirusTotal, WhoisXML) must be provisioned via environment variables (.env) or secure secret managers. Hardcoding credentials in repository source code is strictly prohibited, and automated secret scanning workflows are enforced across all deployments.