owasp-amass/amass
Amass
Amass is an attack surface management tool designed to identify, map, and inventory an organization's internet-facing digital assets. It functions as a security asset discovery engine that systematically expands an organization's known infrastructure footprint through recursive domain name resolution and the collection of intelligence from diverse public data sources.
The platform distinguishes itself by utilizing a graph-based modeling approach to organize discovered resources. By maintaining a persistent graph database, it tracks the relationships between infrastructure components and normalizes data from multiple intelligence feeds into a unified schema. This allows for the visualization of complex network topologies and the long-term monitoring of infrastructure changes.
The framework supports comprehensive security visibility by integrating modular data collection tasks and asynchronous processing to handle large-scale network scanning. It provides a centralized repository for asset records, enabling consistent tracking and analysis of an entity's technical landscape for threat intelligence and vulnerability identification.
Features
- Attack Surface Management - Provides a platform for mapping organizational digital assets to identify security vulnerabilities across the network.
- DNS Reconnaissance - Discovers subdomains and network resources by querying public data sources and performing recursive DNS lookups.
- Asset Discovery Tools - Tracks and models relationships between infrastructure components to maintain a comprehensive view of the attack surface.
- Asset Inventory Management - Maintains a searchable database of discovered resources to track infrastructure changes across multiple environments.
- Threat Intelligence Platforms - Aggregates and analyzes external infrastructure data to proactively identify vulnerabilities and potential entry points.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Reconnaissance and Discovery - In-depth attack surface mapping and asset discovery tool.
- Reconnaissance Tools - Tool for in-depth DNS enumeration and network mapping.
- Subdomain Discovery - Performs brute force enumeration and searches web archives.
- Open Source Intelligence - Tool for in-depth attack-surface mapping and asset discovery.
- Sécurité et confidentialité - Framework for attack surface mapping and asset discovery.
- Security Tools - Tool for in-depth domain reconnaissance
- Vulnerability Scanning - DNS subdomain enumeration and network mapping tool.
- Graph Databases - Maintains a persistent graph database to track historical states and relationships of discovered assets.
- Topology Visualizers - Visualizes relationships between digital resources to map complex network topologies and service interactions.
- Asset Record Repositories - Provides a centralized repository for asset records to ensure consistent tracking and long-term infrastructure monitoring.
- Recursive DNS Resolvers - Performs recursive DNS resolution to systematically discover subdomains and expand the known infrastructure footprint.
- Graph-Based Modeling - Organizes discovered infrastructure into a connected graph of nodes and edges to map complex resource relationships.
- Data Normalization and Schema Enforcement - Standardizes disparate intelligence data into a unified schema for consistent analysis and reporting.
- Relationship Modeling - Links resource types and properties within a structured model to visualize interactions across the technical landscape.
- Data Ingestion Plugins - Executes modular enumeration tasks through independent plugins to gather intelligence from diverse external sources.
