$ man amass
OWASP Amass
In-depth attack surface mapping and asset discovery.
osint / reconpassive / local onlyvia awesome-security
⚠ Recon your own assets, or targets you have written permission to test. Passive OSINT reads public data, but using it to target someone else's systems can still be illegal or against their terms. Examples on this site use example.com placeholders.
## why a developer should care
The most thorough open-source subdomain and asset mapper, maintained under OWASP. Slower than subfinder, but finds more.
## install
$ go install -v github.com/owasp-amass/amass/v5/cmd/amass@main # or brew install amassOther platforms and pre-built binaries: official install guide ↗
Check it worked: open a new terminal and run amass -h. "command not found" means it isn't installed or isn't on your PATH yet (Go installs to ~/go/bin - add it to PATH).
## shortcuts
# Enumerate subdomains
$ amass enum -d {{target}}