How to use the command 'amass' (with examples)

The amass command is an in-depth Attack Surface Mapping and Asset Discovery tool. It is commonly used in penetration testing and reconnaissance activities to gather information about the target’s internet-facing infrastructure. The tool has multiple subcommands, each serving a specific purpose.

Use case 1: Execute an Amass subcommand

Code:

amass subcommand

Motivation: Executing an Amass subcommand allows users to perform specific tasks, such as gathering intelligence, enumerating subdomains, or scraping various data sources. Each subcommand has its own set of options and functionalities.

Explanation:

• amass: The main command to execute Amass functionality.
• subcommand: Replace this with the desired subcommand name (e.g., intel, enum, etc.).

Example output:

amass intel -org google
...
192.168.1.1  [AS15169]  Google LLC  US  19990305

Use case 2: Show general help

Code:

amass -help

Motivation: Showing the general help provides an overview of the available options and subcommands. This is useful for users who are new to Amass or need a reminder of the available functionalities.

Explanation:

• amass: The main command to execute Amass functionality.
• -help: The option to display general help.

Example output:

Usage of amass:
  -active
        Enable DNS resolution of names discovered in the enumeration
  -bl include.txt
        Blacklist input file
  -brute.brute
        Perform brute forcing using names generated from permutations
  ...

Use case 3: Show help on an Amass subcommand

Code:

amass -help subcommand

Motivation: Showing the help for a specific subcommand provides detailed information about its usage, options, and functionality. This helps users understand how to use a specific subcommand effectively.

Explanation:

• amass: The main command to execute Amass functionality.
• -help: The option to display help.
• subcommand: Replace this with the desired subcommand name (e.g., intel, enum, etc.).

Example output:

Usage of amass intel:
  -asn int
        Extract AS information within the provided range(s)
  -ip
        Output IP addresses instead of discovering names
  -org string
        Identify all infrastructure that can be associated with the given organization
  ...

Use case 4: Display version

Code:

amass -version

Motivation: Displaying the version of Amass installed on the system can be helpful for troubleshooting purposes or verifying if the tool is up to date.

Explanation:

• amass: The main command to execute Amass functionality.
• -version: The option to display the version.

Example output:

Amass v3.15.5

Conclusion:

The amass command is a versatile tool for performing Attack Surface Mapping and Asset Discovery. With various subcommands and options, it provides comprehensive capabilities for reconnaissance activities. Whether executing subcommands, accessing help, or checking the version, the amass command empowers users to gain valuable insights about their target’s internet-facing infrastructure.