OWASP Amass

An open source framework that helps information security professionals perform network mapping of attack surfaces and external asset discovery using open source intelligence gathering and reconnaissance techniques!

Docker Pulls

506k

License

Apache 2.0

About OWASP Amass

Our Goal

In-depth attack surface management for everyone! The OWASP Amass Project has developed a framework to help information security professionals perform network mapping of attack surfaces and external asset discovery using open source intelligence gathering and reconnaissance techniques. The framework includes a collection engine for asset discovery, an asset database for storage of findings, and the Open Asset Model, used by various tooling to help understand attack surfaces. If you have any questions about the OWASP Amass Project, please email the project leader Jeff Foley, or contact us on the project’s Discord server (Discord is highly preferred).

• Jeff Foley

• Discord server

Participation

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. All of our projects, tools, documents, forums, and chapters are free and open to anyone interested in improving application security.

How can I participate in the project?

All you have to do is make the Project Leader aware of your available time to contribute to the project. It is also important to let the leader know how you would like to contribute and pitch in to help the project meet its goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leader is key.

• contribute to the project

If I am not a programmer can I participate in the project?

Yes, you can certainly participate in the project if you are not a programmer. The project needs different skills and expertise at different times during its development. Currently, we are looking for researchers, programmers, testers, writers, and graphic designers.

Project Classification

Flagship Project
Breaker
Builder
Tool

Project Resources

Project Leaders

Jeff Foley

Project Information

Flagship Project

Classification

Mobile Security

Language

Latest Version

Latest Release

Contributors

GitHub Stars

15237

Downloads

469004

Requirements

Go programming language runtime
Network connectivity
DNS resolution capabilities
Basic understanding of network reconnaissance

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.