Skip to main content
ASM Cheatsheet

Tools

11 ASM tools with installation guides and usage examples.

Subdomain Discovery Tools

Amass
Beginner to Advanced
Comprehensive DNS enumeration and network mapping
View Details
Subfinder
Beginner
Fast passive subdomain discovery
View Details

Internet-Wide Scanning

Shodan
Intermediate
Internet-connected device search engine
View Details
Censys
Intermediate
Internet-wide scanning and certificate transparency
View Details

OSINT and Information Gathering

theHarvester
Beginner
Email, subdomain, and host OSINT gathering
View Details
Recon-ng
Intermediate to Advanced
Full-featured reconnaissance framework
View Details

Specialized Tools

DNSRecon
Intermediate
DNS enumeration and zone transfer testing
View Details
Fierce
Beginner
Domain scanner and subdomain brute forcer
View Details

CloudEnum

CloudEnum
Beginner to Intermediate
Multi-cloud asset enumeration for AWS, Azure, and GCP
View Details

Scout Suite

Scout Suite
Intermediate to Advanced
Multi-cloud security auditing and misconfiguration detection
View Details

Pacu

Pacu
Advanced
AWS exploitation framework for penetration testing
View Details