amass

Usage

To get the most out of it, make sure to register for most of the sources.

# Listing sources
amass enum -list
Data Source               | Type                    | Available
--------------------------------------------------------------------------------
<SNIP>
Censys                      cert
<SNIP>
# Creating a configuration file
sudo curl https://raw.githubusercontent.com/ykankaya/Amass-1/master/examples/config.ini > ~/.config/amass/config.ini

Create an account at the source, e.g. Censys, and get the API ID under My Account -> API. Then modify the configuration file.

# edit the configuration file
sudo nano ~/.config/amass/config.ini
<SNIP>
[Censys]
apikey = <key>
secret = <secret>
<SNIP>

Active scan.

# Searching for APIs
amass enum -active -d microsoft.com | grep api

Subdomain enumeration.

# Enumerating subdomains
amass enum -d example.com

Resources

User Guide

amass/doc/user_guide.md at master · owasp-amass/amassGitHub

Tutorial