Skip to content
In-depth DNS Enumeration and Network Mapping
Branch: master
Clone or download
Latest commit 7fb8fc3 Mar 10, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci activated GoReleaser in CircleCI Jan 12, 2019
amass version 2.9.4 release Mar 10, 2019
cmd implemented the feature requested in issue #128 Mar 9, 2019
doc #89 fixed problems identified in the PR reviews Jan 29, 2019
examples added fuzzy label searches for #55 Mar 10, 2019
images #59 fixed the crt.sh test Jan 12, 2019
wordlists added the user agents text file to wordlists Oct 2, 2018
.dockerignore WIP: updated docker and circleci files Jul 13, 2018
.gitignore Initial commit Sep 28, 2017
.goreleaser.yaml initial implementation of the Amass tracker tool Feb 21, 2019
CONTRIBUTING.md
Dockerfile add wordlists to the docker build Jan 29, 2019
LICENSE
README.md
snapcraft.yaml version 2.9.4 release Mar 10, 2019

README.md

OWASP Logo OWASP Amass

GitHub Issues CircleCI Status GitHub tag Go Version License Contribute Yes Chat

Packaging status Get it from the Snap Store


DNS Enumeration


The OWASP Amass tool suite obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives, permuting/altering names and reverse DNS sweeping. Additionally, Amass uses the IP addresses obtained during resolution to discover associated netblocks and ASNs. All the information is then used to build maps of the target networks.

Information Gathering Techniques Used:

  • DNS: Basic enumeration, Brute forcing (upon request), Reverse DNS sweeping, Subdomain name alterations/permutations, Zone transfers (upon request)
  • Scraping: Ask, Baidu, Bing, CommonCrawl, DNSDB, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo
  • Certificates: Active pulls (upon request), Censys, CertDB, CertSpotter, Crtsh, Entrust
  • APIs: BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan, Twitter, Umbrella, URLScan
  • Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback

How to Install

Prebuilt

A precompiled version is available for each release.

If your operating environment supports Snap, you can click here to install, or perform the following from the command-line:

sudo snap install amass

On Kali, follow these steps to install Snap and Amass + use AppArmor (for autoload):

sudo apt install snapd
sudo systemctl start snapd
sudo systemctl enable snapd
sudo systemctl start apparmor
sudo systemctl enable apparmor

Add the Snap bin directory to your PATH:

export PATH=$PATH:/snap/bin

Periodically, execute the following command to update all your snap packages:

sudo snap refresh

Using Docker

  1. Build the Docker image:
sudo docker build -t amass https://github.com/OWASP/Amass.git
  1. Run the Docker image:
sudo docker run amass --passive -d example.com

The wordlists maintained in the Amass git repository are available in /wordlists/ within the docker container. For example, to use all.txt:

sudo docker run amass -w /wordlists/all.txt -d example.com

From Source

If you prefer to build your own binary from the latest release of the source code, make sure you have a correctly configured Go >= 1.10 environment. More information about how to achieve this can be found on the golang website. Then, take the following steps:

  1. Download OWASP Amass:
go get -u github.com/OWASP/Amass/...
  1. If you wish to rebuild the binaries from the source code:
cd $GOPATH/src/github.com/OWASP/Amass

go install ./...

At this point, the binaries should be in $GOPATH/bin.

  1. Several wordlists can be found in the following directory:
ls $GOPATH/src/github.com/OWASP/Amass/wordlists/

Documentation

Go to the User's Guide for additional information.

Community

Join our Discord server: Chat on Discord

Project Lead

Follow on Twitter

Contributors

This project improves thanks to all the people who contribute:

Follow on Twitter Follow on Twitter Follow on Twitter Follow on Twitter Follow on Twitter Follow on Twitter Follow on Twitter Follow on Twitter

Mentions

Stargazers over Time

Stargazers over Time

You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.