# osintverse-community/knockpy

Finds a domain's subdomains from passive sources, then checks each one's DNS, HTTP status and TLS certificate

## Install and run

```sh
ot install osintverse-community/knockpy
ot run osintverse-community/knockpy d:example.com
```

The first `ot run` installs the tool after asking once. New to `ot`? See https://otinstaller.com/docs/getting-started.

From an AI agent, through ot's MCP server (`ot mcp`):

```
run_tool {"tool":"osintverse-community/knockpy","inputs":{"domain":"example.com"}}
```

## Inputs

| Name | Type | Required | Default | Description |
| --- | --- | --- | --- | --- |
| `domain` | domain | yes |  |  |

## Outputs

Finds: subdomain, ip, certificate, url.

## What a run does

- Contacts the target directly (sends requests to sites or services about it).
- Does not collect personal data.
- Does not need an account.
- Does not notify the target.
- Usually takes about 120 seconds.
- Publisher's note: After the passive lookup it resolves each subdomain, makes HTTP/HTTPS requests to it and tries a zone transfer on the domain's name servers, so the target's logs see your IP address.
- Connects to the internet.

An agent needs the person's consent before running this tool, because it contacts the target. See https://otinstaller.com/docs/agents#consent.

## Trust

- Latest version: 9.0.0
- Signed: no
- Verified publisher: yes
- Health: unknown
- Installs in the last 30 days: 0
- License: GPL-3.0
- Runtime: Python wheel (pipx), pinned by hash
- Repository: https://github.com/osintverse-community/knockpy
- Packaged by the community from a third-party tool

## Links

- Web page: https://otinstaller.com/osintverse-community/knockpy
- JSON: https://api.otinstaller.com/v1/tools/osintverse-community/knockpy
- README: https://github.com/osintverse-community/knockpy#readme
- Homepage: https://github.com/guelfoweb/knockpy
- Security details: https://otinstaller.com/osintverse-community/knockpy/security