OWASP Amass Project
What is this?
Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.
Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.Is this a CLI tool or does it run as a service?It's a command-line tool written in Go that you run locally against a target domain or organization to enumerate subdomains and map network infrastructure.
It's a command-line tool written in Go that you run locally against a target domain or organization to enumerate subdomains and map network infrastructure.How do I install and run it?The README points to a separate Amass Docs repo for detailed installation and usage instructions; a Docker image is also available for containerized use.
The README points to a separate Amass Docs repo for detailed installation and usage instructions; a Docker image is also available for containerized use.Is there built-in support if I run into install or usage issues?The project directs support questions to its Discord server rather than GitHub issues, so there's no official issue-based support channel for troubleshooting.
The project directs support questions to its Discord server rather than GitHub issues, so there's no official issue-based support channel for troubleshooting.Who is this built for?Security researchers, penetration testers, and OSINT practitioners who need to discover and map an organization's external attack surface.
Security researchers, penetration testers, and OSINT practitioners who need to discover and map an organization's external attack surface.Does it run on Linux and macOS, or just one platform?Being a Go CLI tool with an official Docker image, it runs cross-platform on Linux, macOS, and Windows.
Being a Go CLI tool with an official Docker image, it runs cross-platform on Linux, macOS, and Windows.Can I use the output with other recon tools like Maltego?Yes, Amass integrates with Maltego, as reflected in its own project topics, letting you visualize discovered assets within Maltego's graph interface.
Yes, Amass integrates with Maltego, as reflected in its own project topics, letting you visualize discovered assets within Maltego's graph interface.Can I get support through GitHub issues?No, the maintainers explicitly ask users not to open GitHub issues for support or usage questions and to use the Discord server instead.
No, the maintainers explicitly ask users not to open GitHub issues for support or usage questions and to use the Discord server instead.What are similar projects?OneForAll, spiderfoot, bbot, flowsint, theHarvester, Sublist3r, holehe, Sn1per
OneForAll, spiderfoot, bbot, flowsint, theHarvester, Sublist3r, holehe, Sn1perWhich topics is it in?subdomain, recon, owasp, information-gathering, network-security, osint, dns, penetration-testing, cybersecurity, golang, go, security
subdomain, recon, owasp, information-gathering, network-security, osint, dns, penetration-testing, cybersecurity, golang, go, security