amass enum

> Find subdomains of a domain.

Passively find subdomains of a domain:

amass enum -passive -d {domain_name}

Find subdomains of a domain and actively verify them attempting to resolve the found subdomains:

amass enum -active -d {domain_name} -p {80,443,8080}

Do a brute force search for subdomains:

amass enum -brute -d {domain_name}

Save the results to a text file:

amass enum -o {output_file} -d {domain_name}

Save the results to a database:

amass enum -o {output_file} -dir {path/to/database_directory}

> This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).

-- Response ended

-- Page fetched on Fri May 17 14:55:12 2024