Description
In-Depth DNS Enumeration and Network Mapping.
The OWASP Amass tool suite obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives, permuting/altering names and reverse DNS sweeping. Additionally, Amass uses the IP addresses obtained during resolution to discover associated netblocks and ASNs. All the information is then used to build maps of the target networks.
Amass ships with a set of wordlist (to be used with the amass -w flag) that are found under the wordlists output.