amass
- Hacker tools: Amass - hunting for subdomains - Intigriti
- https://github.com/owasp-amass/amass/blob/master/doc/user_guide.md
- https://www.dionach.com/how-to-use-owasp-amass-an-extensive-tutorial/
whois information
amass intel -d bcc.gov.bd -whois
This command uses the Amass tool to gather intelligence on the domain bcc.gov.bd by querying WHOIS databases for registration and ownership information. The results help attackers identify key organizational details and contacts that can be used for further reconnaissance or social engineering attacks.
DNS Enumeration using OWASP Amass
Source: https://github.com
OWASP Amass is a DNS Enumeration tool that allows attackers to map the target network and discover potential attack surfaces. Attackers use a combination of both active and passive Reconnaissance techniques to gather information from DNS. This tool enables attackers to enumerate critical information without triggering any security alerts within the DNS environment of the targeted network.
Installation in Ubuntu
sudo snap install amass
Basic Enumeration
Attackers can execute the following command to enumerate DNS information from the target network:
amass enum -d <Target Domain>
The above command allows attackers to gather all the details of DNS, including its subdomains. Using this command, attackers can also enumerate details of IP addresses, SSL/TLS, HTTP, APIs, certificates, web archives, and data scraping incorporated with the target domain.
Additional OWASP Amass Commands
Passive Enumeration
Run the following command to perform a passive enumeration:
amass enum -passive -d <Target Domain> -src
Active Enumeration with Brute-forcing
Run the following command to perform an active enumeration through brute-forcing with a specified wordlist:
amass enum -active -d <Target Domain> -brute -w /usr/share/wordlists/amass/all.txt
Track Enumeration Scans
Run the following command to track or compare the last two enumeration scans performed on the target domain:
amass track -config /root/amass/config.ini -dir amass4owasp -d <Target Domain> -last 2
Display Database Results
Run the following command to display the results of enumeration stored in amass database (amass4owasp):
amass db -dir amass4owasp -list
Create Visual Graph
Run the following command to create a d3-force HTML visual graph:
amass viz -d3 -dir amass4owasp