OWASP Amass Subdomain Scanner

The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.

Information Gathering Techniques Used:

1] DNS: Basic enumeration, Brute forcing (upon request), Reverse DNS sweeping, Subdomain name alterations/permutations, Zone transfers (upon request)

2] Scraping: Ask, Baidu, Bing, CommonCrawl, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, HackerOne, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ViewDNS, Yahoo

3] Certificates: Active pulls (upon request), Censys, CertDB, CertSpotter, Crtsh, Entrust

4] APIs: AlienVault, BinaryEdge, BufferOver, CIRCL, DNSDB, HackerTarget, Mnemonic, NetworksDB, PassiveTotal, RADb, Robtex, SecurityTrails, ShadowServer, Shodan, Sublist3rAPI, TeamCymru, ThreatCrowd, Twitter, Umbrella, URLScan, VirusTotal

5] Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback

Video Tutorial:

 

Documentation:  

Download:

Amass is available for various platforms like Linux, Windows, MacOS etc.
2] Precompiled Binary (Windows, MacOS, Linux)

Official Page: OWASP Amass

11 comments :

  1. Thank you for your very good information and feedback from you. car dealers san jose web design company

    ReplyDelete
  2. Very educating story, saved your site for hopes to read more! development studios

    ReplyDelete
  3. I visited a lot of website but I conceive this one holds something extra in it in it web designer

    ReplyDelete
  4. I guess that this resource is quite essential, as I was able to learn a lot of information that will be beneficial for me!

    ReplyDelete
    Replies

    1. IEEE Final Year projects Project Centers in Chennai are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes, while specialists like the enjoyment in interfering with innovation. For experts, it's an alternate ball game through and through. Smaller than expected IEEE Final Year project centers ground for all fragments of CSE & IT engineers hoping to assemble. Final Year Projects for CSE It gives you tips and rules that is progressively critical to consider while choosing any final year project point.

      Spring Framework has already made serious inroads as an integrated technology stack for building user-facing applications. Spring Framework Corporate TRaining the authors explore the idea of using Java in Big Data platforms.
      Specifically, Spring Framework provides various tasks are geared around preparing data for further analysis and visualization. Spring Training in Chennai


      The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

      Delete
  5. A person’s Are generally Weight loss is definitely a practical and flexible an eating plan method manufactured for those who suffer that want to weight loss and therefore ultimately conserve a much more culture. weight loss ipad mockups

    ReplyDelete
  6. I'm truly enjoying the design and layout of your site. It's a very easy on the eyes which makes it much more pleasant for me to come here and visit more often. Did you hire out a designer to create your theme? Superb work! macbook template

    ReplyDelete
  7. Some truly howling work on behalf of the owner of this website , dead great subject matter. android mock up

    ReplyDelete
  8. You must be very astute at research and writing. This shows up in your original and unique content. I agree with your primary points on this topic. This content should be seen by more readers. webflow design agency

    ReplyDelete
  9. Simply a smiling visitor here to share the love (:, btw great style and design . website development agencies

    ReplyDelete
  10. It's very useful blog post with inforamtive and insightful content and i had good experience with this information. We, at the CRS info solutions ,help candidates in acquiring certificates, master interview questions, and prepare brilliant resumes.Find top Salesforce admin interview questions in 2020.
    These Salesforce developer interview questions are highly helpful in 2020. You can read these Salesforce lightning interview questions and Salesforce integration interview questions which are prepared by industry experts.

    ReplyDelete

 
Top