Skip to content

Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

License

Notifications You must be signed in to change notification settings

Ostorlab/agent_amass

Repository files navigation

Agent amass

Amass performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques..

agent-amass

This repository is an implementation of OXO Agent for amass by OWASP.

Getting Started

The Amass Agent works collectively with other agents. It's job is to reverse a subdomain name and send all the identified records to the other agents responsible for scanning those records. To perform your first scan, simply run the following command:

oxo scan run --install --agent agent/ostorlab/amass --agent agent/ostorlab/subfinder domain-name your-domain.com

This command will download and install agents agent/ostorlab/amass & agent/ostorlab/subfinder and target the domain your-domain. Subfinder Agent will scan for , and sends all identified subdomains, then Amass will reverse those subdomains and send the records. You can use any Agent expecting <v3.asset.domain_name> as an in-selector, like Nmap, OpenVas, etc. For more information, please refer to the OXO Documentation

Usage

Agent Amass can be installed directly from the oxo agent store or built from this repository.

Install directly from oxo agent store

oxo agent install agent/ostorlab/amass

Build directly from the repository

  1. To build the Amass agent you need to have oxo installed in your machine. If you have already installed oxo, you can skip this step.
pip3 install ostorlab
  1. Clone this repository.
git clone https://github.com/Ostorlab/agent_amass.git && cd agent_amass
  1. Build the agent image using oxo cli.
oxo agent build --file=ostorlab.yaml

You can pass the optional flag --organization to specify your organisation. The organization is empty by default. 4. Run the agent using on of the following commands: * If you did not specify an organization when building the image: shell oxo scan run --agent agent//amass --agent agent//subfinder domain-name your-domain.com * If you specified an organization when building the image: ```shell oxo scan run --agent agent/[ORGANIZATION]/subfinder --agent agent/[ORGANIZATION]/amass domain-name your-domain.com

License

License: Apache-2.0

About

Agent for OWASP for network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

Resources

License

Stars

Watchers

Forks

Packages

No packages published