OWASP Amass is a command-line tool for in-depth attack surface mapping and external asset discovery using open source information gathering and active reconnaissance techniques.
The tool addresses the problem of identifying an organization's exposed digital footprint by combining passive and active reconnaissance methods. It performs network mapping to uncover subdomains, IP addresses, and other assets associated with a target domain or organization. The approach integrates multiple data sources and reconnaissance techniques to build a comprehensive picture of an attack surface.
Organizations conducting security assessments, penetration testing, or asset inventory work should consider this tool. It suits teams that need systematic, automated discovery of external-facing infrastructure and want to understand their exposure before attackers do. The tool is available through multiple installation channels and integrates with other security platforms like Maltego.
The project maintains active test coverage and accepts community contributions through a dedicated Discord server where users can discuss goals and get support. The codebase is written in Go, making it portable across platforms.
