OWASP Amass Project
summary
Amass is an in-depth DNS enumeration and network mapping tool written in Go that reaches out to more than 30 passive data sources and then blends passive collection with active steps like certificate grabs, permutation/brute forcing, and reverse DNS sweeping. It outputs JSON, D3 graphs and can feed graph databases (neo4j) so visualization and relationship discovery reveal thousands of subdomains and unexpected netblocks; defaults to no API keys required and supports multi-resolver, high-performance enumeration.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:25About Jeff
- 3:08Network Enumeration
- 4:35Network Enumeration Data
- 5:27Visualization
- 6:48Network Images
- 8:35Why
- 10:42Niche Tools
- 25:23Future Directions
- 28:13Live Demo
- 39:06How to Install
- 41:19Questions
related talks
29mFlagship Projects: Amass
45mLarge-Scale Application Attack Surface Management
32mAutomating Web Application Bug Hunting
48mKnock knock, who's there Identifying assets in the cloud
34mOWASP Nettacker
16mDevelopment of Asset Mapping External Attack tool
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
26mInternet Scanning - Current State and Lessons Learned