Skill UI

Automates Ip2whois tasks via Composio’s Rube MCP integration, guiding users through tool discovery, connection checks, multi-tool execution, and schema-compliant workflow steps for reliable toolkit operations.

Builds an automated system that ingests passive DNS, certificate transparency, WHOIS, and IP enrichment data to map adversary command-and-control infrastructure, spot new domains matching attacker patterns, and continuously monitor their relationships.

Collects and synthesizes passive OSINT about threat actors, malicious infrastructure, and attack campaigns using sources like Maltego, Shodan, SpiderFoot, and security registries to support phishing investigations, infrastructure reconnaissance, or enrichment of CTI profiles.

Tracking Threat Actor Infrastructure uses Shodan, Censys, passive DNS, CT logs, WHOIS, and network fingerprinting to discover, map, and pivot across adversary-controlled servers and domains, letting analysts detect new C2 nodes and phishing sites earlier.