Blog

Amass is a subdomain enumeration tool and works with active and passive enumeration.

ＤＥＳＣＲＩＰＴＩＯＮ:

The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

First of all Setting an DNSValidator and getting a list of 50 resolvers, save it as 50resolvers.txt

git clone https://github.com/vortexau/dnsvalidator.git

cd dnsvalidator
python3 setup.py install

dnsvalidator -tL https://public-dns.info/nameservers.txt -threads 200 -o resolvers.txt

sort -R resolvers.txt | tail -n 50 > 50resolvers.txt

mv 50resolvers.txt /home/kali

ＮＯＷ　ＩＴ＇Ｓ　ＴＩＭＥ　ＴＯ　ＤＯＷＮＬＯＡＤ　ＡＭＡＳＳ 🎯 :

Go to This link

Right-click copy that link and paste it on the terminal by following commands.

wget https://github.com/OWASP/Amass/releases/download/v3.13.4/amass_linux_amd64.zip

unzip amass_linux_amd64.zip

cd amass_linux_amd64
mv amass /usr/local/bin

Ｔｈａｔ’ｓ　ｉｔ，　ｒｕｎ　ｔｈｅ　ｔｏｏｌ　ｈｅｒｅ　ｗｅ　ｇｏ
ｗｏｗ　ｓｅｅ　ｈｏｗ　ｉｔ　ｌｏｏｋｓ　ｓｏ　ｂｅａｕｔｉｆｕｌ.

Ｐａｓｓｉｖｅ　Ｒｅｃｏｎ :

amass enum -passive -d hackerone.com -o h1.txt -rf 50resolvers.txt

Ａｃｔｉｖｅ　Ｒｅｃｏｎ　：

amass enum -active -d hackerone.com -o h1_active.txt -rf 50resolvers.txt

Thanks for reading! I hope this helps,

For more Tips & methodology Follow me

♥ Happy ＨΛＣＫＩＮＧ buddies ♥