owasp-amass/amass

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

15047 stars · 2173 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OWASP Amass is a Go-based framework for in-depth attack surface mapping and external asset discovery using OSINT gathering and active reconnaissance techniques. It includes a collection engine, an asset database, and the Open Asset Model for understanding attack surfaces.

Use cases

• enumerate subdomains of a target domain
• map an organization's external attack surface
• discover assets via open source intelligence
• perform DNS enumeration and reconnaissance
• feed discovered assets into Maltego
• monitor asset changes over time for security teams

When to choose

• you need comprehensive OSINT-driven attack surface discovery
• you want an OWASP-maintained, actively developed recon tool
• you need subdomain enumeration at scale with data storage

When to avoid

• you need internal network vulnerability scanning rather than external asset discovery
• you want a GUI-only tool without CLI usage
• you need web application scanning (e.g., DAST) rather than reconnaissance

Facets

cli-tool · maturity active

osint security networking cli developer-tools security penetration-testing osint networking windows go cli attack-surface-mapping asset-discovery subdomain-enumeration reconnaissance dns owasp maltego linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="owasp-amass/amass")