Amass
Beginner to Advanced
Comprehensive DNS enumeration and network mapping
https://github.com/owasp-amass/amassInstallation
# Go installation
go install -v github.com/owasp-amass/amass/v4/...@master
# Package managers
sudo apt install amass # Ubuntu/Debian
brew install amass # macOS
sudo snap install amass # SnapUsage
Basic Usage
# Passive enumeration (safe, no direct contact)
amass enum -passive -d example.com
# Active enumeration with brute force
amass enum -active -d example.com -brute
# Use specific data sources
amass enum -passive -d example.com -src crtsh,hackertarget,virustotal
# Output to file with verbose logging
amass enum -passive -d example.com -o subdomains.txt -v
# Multiple domains from file
amass enum -passive -df domains.txtAdvanced Techniques
# Custom configuration file
amass enum -passive -d example.com -config /path/to/config.ini
# Specify resolvers
amass enum -passive -d example.com -rf resolvers.txt
# Include IP addresses in output
amass enum -passive -d example.com -ip
# Database operations
amass db -names -d example.com # List discovered names
amass db -show -d example.com # Show all data
amass viz -d3 -d example.com # Generate D3.js visualization