OWASP Amass Alternatives
OWASP Amass
The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.
Information Gathering Techniques Used:
DNS: Basic enumeration, Brute forcing (optional), Reverse DNS sweeping, Subdomain name alterations/permutations, Zone transfers (optional)
Scraping: Ask, Baidu, Bing, DNSDumpster, DNSTable, Dogpile, Exalead, Google, HackerOne, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ViewDNS, Yahoo
Certificates: Active pulls (optional), Censys, CertSpotter, Crtsh, Entrust, GoogleCT
APIs: AlienVault, BinaryEdge, BufferOver, CIRCL, CommonCrawl, DNSDB, GitHub, HackerTarget, Mnemonic, NetworksDB, PassiveTotal, Pastebin, RADb, Robtex, SecurityTrails, ShadowServer, Shodan, Spyse (CertDB & FindSubdomains), Sublist3rAPI, TeamCymru, ThreatCrowd, Twitter, Umbrella, URLScan, VirusTotal, WhoisXML
Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback
Best OWASP Amass Alternatives
Are you looking for alternatives to OWASP Amass? Please see our top picks. In this article, we provide the list of some OWASP Amass alternatives that will work on Windows and other platforms.
BitNinja.io
CommercialLinuxSoftware as a Service (SaaS)BitNinja is a multi-layered security system to block server attacks at any threat level automatically and make the troubleshooting of all security incidents easier via a...
Features:
- DoS protection
- Automatic Backup
- Greylist
- Incident report
- Linux
- Malware analysis
- Nginx
- Php
- Server Management
- Server Monitoring
- SQL Injection Protection
- Vps
- Web Application Firewall
- Web hosting
- Web log analysis
sn0int
FreeOpen SourceMacWindowsLinuxBSDsn0int is a semi-automatic OSINT framework and package manager. It was built for IT security professionals and bug hunters to gather intelligence about a given target or...
Features:
- Network Discovery
- Network Monitoring
- Data Mining
- Information gathering
- OSInt
Sublist3r
FreeOpen SourceLinuxWebSelf-HostedSublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the...
Anubis Subdomain enumeration
FreeOpen SourceLinuxWebSelf-HostedAnubis is a subdomain enumeration and information gathering tool. Anubis collates data from a variety of sources.
Dnscan
FreeOpen SourceLinuxWebDnscan is a python wordlist-based DNS subdomain scanner. The script will first try to perform a zone transfer using each of the target domain's nameservers. If...
Lepus Subdomain finder
FreeOpen SourceLinuxWebSelf-HostedLepus is a utility for identifying and collecting subdomains for a given domain. Subdomain discovery is a crucial part during the reconnaissance phase.
Upvote Comparison
Interest Trends
OWASP Amass Reviews
Add your reviews & share your experience when using OWASP Amass to the world. Your opinion will be useful to others who are looking for the best OWASP Amass alternatives.