Amass

What it does

OWASP Amass maps an organization's external attack surface through DNS enumeration, scraping, and dozens of data sources to discover subdomains and related assets. It's a go-to for building a complete picture of internet-facing infrastructure.

Common use cases

• •Map an organization's full external attack surface before a penetration test.
• •Discover forgotten subdomains and cloud-hosted assets after an acquisition.
• •Validate your own DNS footprint from an attacker's perspective.

Key features

• •Integrates with dozens of passive and active data sources.
• •Builds subdomain relationships into an interactive graph for analysis.
• •Supports brute-force enumeration alongside passive collection.
• •Outputs to multiple formats including JSON, Graphviz, and HTML.

Source