← Back to Skills Marketplace
299
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install subdomain-enum
Description
Enumerate subdomains for any domain using DNS brute-force and certificate transparency logs (crt.sh). Use when a user needs to discover subdomains, perform r...
Usage Guidance
This skill is a straightforward subdomain enumerator. Before installing/running: only scan domains you own or are authorized to test; review any custom wordlist files you pass in (they may contain words that expand scan scope); be aware the script will write output to any file path you specify (avoid overwriting important files and don't run it as root). Installing the 'requests' package requires network access and appropriate permissions in the environment. If you plan to let an agent invoke this automatically, ensure network egress to crt.sh is acceptable and that the agent is not given broader file-system access than necessary.
Capability Analysis
Type: OpenClaw Skill
Name: subdomain-enum
Version: 1.0.0
The skill provides a standard subdomain enumeration tool using DNS brute-forcing and public certificate transparency logs (crt.sh). The Python script `scripts/subenum.py` uses legitimate libraries (socket, requests) for its stated purpose and contains no evidence of data exfiltration, obfuscation, or malicious intent.
Capability Assessment
Purpose & Capability
Name and description match the included script and SKILL.md: DNS brute-force and crt.sh lookups are exactly what the script implements; no unrelated binaries, env vars, or services are requested.
Instruction Scope
SKILL.md simply instructs running the included Python script and documents options. The script may read a user-supplied wordlist file and can write results to a file — both expected for this tool, but these capabilities mean it can access arbitrary paths you pass as arguments.
Install Mechanism
No install spec; the only runtime dependency is the widely used 'requests' package (pip). This is proportionate, but installing packages via pip requires network access and privileges in the environment where the agent runs.
Credentials
No environment variables, credentials, or config paths are required. The script only performs DNS lookups and HTTPS requests to crt.sh; requested capabilities are minimal and aligned with the purpose.
Persistence & Privilege
Skill is not always-enabled and does not modify other skills or system-wide settings. It does not persist credentials or enable itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install subdomain-enum - After installation, invoke the skill by name or use
/subdomain-enum - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of subdomain-enum.
- Enumerates subdomains using DNS brute-force and certificate transparency logs (crt.sh)
- No API keys required; supports built-in or custom wordlists
- Allows concurrent DNS queries with configurable threads
- Optional JSON output and direct file saving
- Includes switches for skipping crt.sh lookup and enabling verbose progress
Metadata
Frequently Asked Questions
What is Subdomain Enum?
Enumerate subdomains for any domain using DNS brute-force and certificate transparency logs (crt.sh). Use when a user needs to discover subdomains, perform r... It is an AI Agent Skill for Claude Code / OpenClaw, with 299 downloads so far.
How do I install Subdomain Enum?
Run "/install subdomain-enum" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Subdomain Enum free?
Yes, Subdomain Enum is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Subdomain Enum support?
Subdomain Enum is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Subdomain Enum?
It is built and maintained by John Wang (@johnnywang2001); the current version is v1.0.0.
More Skills