OWASP Amass Alternatives
OWASP Amass
The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.
Information Gathering Techniques Used:
DNS: Basic enumeration, Brute forcing (optional), Reverse DNS sweeping, Subdomain name alterations/permutations, Zone transfers (optional)
Scraping: Ask, Baidu, Bing, DNSDumpster, DNSTable, Dogpile, Exalead, Google, HackerOne, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ViewDNS, Yahoo
Certificates: Active pulls (optional), Censys, CertSpotter, Crtsh, Entrust, GoogleCT
APIs: AlienVault, BinaryEdge, BufferOver, CIRCL, CommonCrawl, DNSDB, GitHub, HackerTarget, Mnemonic, NetworksDB, PassiveTotal, Pastebin, RADb, Robtex, SecurityTrails, ShadowServer, Shodan, Spyse (CertDB & FindSubdomains), Sublist3rAPI, TeamCymru, ThreatCrowd, Twitter, Umbrella, URLScan, VirusTotal, WhoisXML
Web Archives: ArchiveIt, ArchiveToday, Arquivo, LoCArchive, OpenUKArchive, UKGovArchive, Wayback
Best Free OWASP Amass Alternatives
Looking for a program that is like OWASP Amass? We have our top picks here. If you need another program that has some of the features of OWASP Amass on your device, read what we recommend in this post.
sn0int
FreeOpen SourceMacWindowsLinuxBSDsn0int is a semi-automatic OSINT framework and package manager. It was built for IT security professionals and bug hunters to gather intelligence about a given target or...
Features:
- Network Discovery
- Network Monitoring
- Data Mining
- Information gathering
- OSInt
Sublist3r
FreeOpen SourceLinuxWebSelf-HostedSublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the...
Anubis Subdomain enumeration
FreeOpen SourceLinuxWebSelf-HostedAnubis is a subdomain enumeration and information gathering tool. Anubis collates data from a variety of sources.
Dnscan
FreeOpen SourceLinuxWebDnscan is a python wordlist-based DNS subdomain scanner. The script will first try to perform a zone transfer using each of the target domain's nameservers. If...
Lepus Subdomain finder
FreeOpen SourceLinuxWebSelf-HostedLepus is a utility for identifying and collecting subdomains for a given domain. Subdomain discovery is a crucial part during the reconnaissance phase.
Upvote Comparison
Interest Trends
OWASP Amass Reviews
Add your reviews & share your experience when using OWASP Amass to the world. Your opinion will be useful to others who are looking for the best OWASP Amass alternatives.