OWASP Amass
Maps an organisation's external attack surface, finding subdomains through passive sources, DNS enumeration and certificate data.
Open OWASP Amass ↗https://github.com/owasp-amass/amass
- Type
- Command line
- Cost
- Free
- Touches the target?
- Yes, can be active
- Account needed
- No
- Category
- Domains & DNS
- Language
- Go
- License
- Apache-2.0
- Platforms
- linux, macos, windows
- GitHub stars
- 15,225
- Last updated
- 2026-07-19
- Link status
- Online, checked 2026-09-26
Takes
Gives you
Install
brew install amassSource: github.com/owasp-amass/amass · Docker image available
Where to go next
Found something with OWASP Amass? These tools take it as input.
Domain →
- AA419 Fake Sites Database
- AbuseIPDB
- AlienVault OTX
- AltDNS
- Blacklist Checker
- BrightCloud URL/IP Lookup
- BuiltWith
- Censys
- CertGraph
- CertKit CT Search
- CloudFail
- Criminal IP
- crt.sh
- Daily DNS Changes
- DNSDumpster
- DNSlytics
- DNSRecon
- dnstwist
- dnstwister
- DNSViz
- Domain Dossier
- DomainCrawler
- DomainHelp
- DomainTools Whois
- Email Format
- Email Permutator
- Google Safe Browsing site status
- GrayhatWarfare Public Buckets
- Hunter
- Hurricane Electric BGP Toolkit
- IBM X-Force Exchange
- ImmuniWeb
- IP2WHOIS
- Maltego
- Maltiverse
- Malwagon
- MerkleMap
- mnemonic Passive DNS
- MultiRBL
- MxToolbox
- NameCheckup
- Namechk
- Netlas.io
- Nikto Online
- Nmap
- onion-lookup
- ONYPHE
- Pentest-Tools Subdomain Finder
- PhishStats
- PingCastle Azure Tenant Resolution
- Pulsedive
- Recon-ng
- Robtex
- scumware.org
- SecurityTrails
- Shodan
- Skymem
- Spamhaus Reputation Checker
- SpiderFoot
- Subfinder
- Sublist3r
- Sucuri SiteCheck
- SWITCH WHOIS (.ch / .li)
- SynapsInt
- theHarvester
- Trend Micro Site Safety Center
- urlscan.io
- URLVoid
- utrace
- ViewDNS.info
- VirusTotal
- VoilaNorbert
- Wappalyzer
- Wayback Machine
- Website Informer
- Who.is
- Whoisology
- Zone-H
IP address →
- AbuseIPDB
- AlienVault OTX
- ARIN WHOIS
- Blacklist Checker
- Blocklist.de
- BotScout
- BrightCloud URL/IP Lookup
- Censys
- checkip
- CIRCL BGP Ranking
- Criminal IP
- DB-IP
- DNSlytics
- DNSRecon
- Domain Dossier
- DomainTools Whois
- ExoneraTor
- FireHOL IP Lists
- GreyNoise Visualizer
- HackerTarget Reverse DNS
- HoneyDB
- Hurricane Electric BGP Toolkit
- IBM X-Force Exchange
- InfoSniper
- IP2Location
- IPLocation.net
- IPtoASN
- IPVoid
- Maltego
- Maltiverse
- Malwagon
- Masscan
- MaxMind GeoIP
- MetaDefender Cloud
- mnemonic Passive DNS
- MultiRBL
- MxToolbox
- Netlas.io
- Nmap
- Online Port scanner
- ONYPHE
- PeeringDB
- PhishStats
- Project Honey Pot
- Pulsedive
- Robtex
- SANS ISC / DShield
- SecurityTrails
- Shodan
- Spamhaus Reputation Checker
- SpiderFoot
- SynapsInt
- Team Cymru IP to ASN
- urlscan.io
- utrace
- ViewDNS.info
- VirusTotal
- Who.is
Similar tools
Community database of fake banks, shipping companies and other scam websites, with reports and screenshots.
- Website
- Freemium
TakesDomain
Community database of reported malicious IPs. Shows abuse reports, a confidence score, the ISP and the usage type.
- Website
- Freemium
TakesIP addressDomain
Community threat-intelligence exchange. Look up an IP, domain or file hash to see the reports and campaigns it appears in.
- Website
- Free
- Account
TakesIP addressDomainFile hash
Generates variations of known subdomains (dev-, -staging, numbers) and resolves them to find hidden hosts.
- Command line
- Free
- Active
TakesDomain
Annual reports from thousands of listed companies worldwide, including past years, in one searchable place.
- Website
- Free
TakesCompany
Official registry lookup for IP ranges and networks in North America: who holds an address block and their contacts.
- Website
- Free
TakesIP addressCompany