Flagship Projects: Amass

on YouTube ↗29m

" summary

Amass claims to produce the most complete internet-facing inventory by ingesting OSINT, probing with DNS/TLS/web techniques and attack surface mapping, storing results in a graph database for change tracking and visualization. It supports 70+ data sources, offers embedded scripting so teams add proprietary feeds, and integrates into continuous pipelines. Bug bounty use and long‑running enumerations validate that it finds many unknown assets, surfaces what disappears or appears, and scales well in practice.

AI-written summary · about

" chapters (8)

1. 0:00Intro
2. 1:40What is Amass
3. 4:56Why Amass
4. 8:58Data Sources
5. 11:43Tracking
6. 16:25Visualization
7. 19:34Extendability
8. 22:55Whats next

" related talks

• 45mOWASP Amass ProjectJeff Foley · OWASP AppSec USA 2018
• 35mAI-Powered Bug HuntingBen Sadeghipour · GOTO Chicago 2024
• 32mAutomating Web Application Bug HuntingJonathan Cran, Jerry Gamblin · BSidesSF 2019
• 16mDevelopment of Asset Mapping External Attack toolDan (Idan) Taler · DevConf.CZ 2023
• 38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities ProactivelyPeter Yaworski · Øredev 2018
• 45mLarge-Scale Application Attack Surface ManagementFariskhi Vidyan · OWASP Global AppSec Singapore 2023
• 46mThe Bug Hunter's Methodology 2.0Jason Haddix · OWASP AppSec California 2018
• 27mCollect All the Data; Protect All the ThingsAaron Rosenmund · BSidesSF 2019