Performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
Can get a lot more subdomain but it’s slow.
sudo apt-get install amass
amass enum -d tesla.com
| Subcommand | Description |
|---|---|
| amass intel | Discover targets for enumerations |
| amass enum | Perform enumerations and network mapping |
| amass viz | Visualize enumeration results |
| amass track | Track differences between enumerations |
| amass db | Manipulate the Amass graph database |