OWASP Amass icon
OWASP Amass icon

OWASP Amass

The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.

Cost / License

  • Free
  • Open Source

Platforms

  • Linux
  • Online  [https://www.nmmapper.com/sys/tools/subdomainfinder/](https://www.nmmapper.com/sys/tools/subdomainfinder/)
  • Self-Hosted
OWASP Amass alternatives  
6likes
8alternatives
0articles
Save

Features

No features, maybe you want to suggest one?

 Tags

Highlights All activities

OWASP Amass News & Activities

Recent activities

OWASP Amass information

GitHub repository

  •  15,373 Stars
  •  2,200 Forks
  •  245 Open Issues
  •   Updated  
View on GitHub

Popular alternatives

View all
OWASP Amass was added to AlternativeTo by nmmapper on and this page was last updated .

No comments or reviews, maybe you want to be first?

Official Links

AppStores & Other Links

Install from the command line

  • brew install amass

Be careful what you paste into a terminal. Check what a command installs before running it.

What is OWASP Amass?

The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.

Information Gathering Techniques Used:

DNS: Basic enumeration, Brute forcing (optional), Reverse DNS sweeping, Subdomain name alterations/permutations, Zone transfers (optional) Scraping: Ask, Baidu, Bing, DNSDumpster, DNSTable, Dogpile, Exalead, Google, HackerOne, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ViewDNS, Yahoo Certificates: Active pulls (optional), Censys, CertSpotter, Crtsh, Entrust, GoogleCT APIs: AlienVault, BinaryEdge, BufferOver, CIRCL, CommonCrawl, DNSDB, GitHub, HackerTarget, Mnemonic, NetworksDB, PassiveTotal, Pastebin, RADb, Robtex, SecurityTrails, ShadowServer, Shodan, Spyse (CertDB & FindSubdomains), Sublist3rAPI, TeamCymru, ThreatCrowd, Twitter, Umbrella, URLScan, VirusTotal, WhoisXML Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback