amass enum
Find subdomains of a domain. More information: https://github.com/OWASP/Amass/blob/master/doc/user_guide.md#the-enum-subcommand.
-
Passively find subdomains of a domain:
amass enum -passive -d {{domain_name}}
-
Find subdomains of a domain and actively verify them attempting to resolve the found subdomains:
amass enum -active -d {{domain_name}} -p {{80,443,8080}}
-
Do a brute force search for subdomains:
amass enum -brute -d {{domain_name}}
-
Save the results to a text file:
amass enum -o {{output_file}} -d {{domain_name}}
-
Save the results to a database:
amass enum -o {{output_file}} -dir {{path/to/database_directory}}
License and Disclaimer
The content on this page is copyright © 2014—present the tldr-pages team and contributors.This page is used with permission under Creative Commons Attribution 4.0 International License.
While we do attempt to make sure content is accurate, there isn't a warranty of any kind.