=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
==OWASP Amass Project==

In-depth DNS Enumeration and Network Mapping written in Go!

The OWASP Amass project was originally created when the project lead was showing organizations what they look like on the Internet, and he noticed that the tools available were returning incomplete results relative to what could be discovered manually. With the identification of this gap in capabilities for security experts, the Amass project was born.

==Description==

The OWASP Amass project is focused on DNS enumeration and network infrastructure mapping techniques. These techniques include: obtaining subdomain names by scraping web pages, accessing web APIs, recursive brute forcing, crawling web archives, permuting/altering names, reverse DNS sweeping, and querying ASNs and netblocks associated with IP addresses. The information collected during an enumeration is used to build a network map of an organization's presence on the Internet.

Amass reaches out to over 30 passive data sources to learn about the DNS namespace of a target domain. By default, Amass validates all the names by performing DNS queries across a pool of DNS resolvers, which spreads out the activity generated by the enumeration. For all IP addresses collected during this process, Amass queries for associated netblocks and ASNs. As additional data sources become available to provide visibility of the Internet, implementations can quickly be developed within Amass due to the simple interfaces worked into the design.

When the enumeration is complete, an Amass suite tool is capable of converting the results into several different formats accepted by popular network graph visualization engines. This aids analysts and infosec experts attempting to quickly identify network layout and external networks being utilized by the target organization.

If users wish to maintain the information collected by the Amass software, data handlers interface with storage systems, such as [https://neo4j.com/ Neo4j]. Additional handlers can easily be implemented in order to support other databases or even custom solutions.

The project has software deliverables that are implemented in the Go programming language. These deliverables include command-line tools, a local transform for [https://www.paterva.com/web7/buy/maltego-clients.php Maltego], and a Go package that can be imported into other software projects. The software is portable across popular operating systems such as Windows, Linux, MacOS, FreeBSD, etc. The command-line tools can be obtained via several mechanisms described on the installation page, such as through a Go development environment, the release binaries and the Snap package manager for Linux systems.

==Licensing==

This program is free software: you can redistribute it and/or modify it under the terms of the [https://www.apache.org/licenses/LICENSE-2.0 Apache 2.0] license. OWASP Amass and any contributions are Copyright © by Jeff Foley 2017.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Project Resources ==

[[Https://github.com/OWASP/Amass Source Code]]

[[Https://github.com/OWASP/Amass/releases What's New (Revision History)]]

[[Https://github.com/OWASP/Amass/issues Issue Tracker]]

== Project Leader ==
[https://www.owasp.org/index.php/User:Caffix Jeff Foley]

{| width="200" cellpadding="1"
|-
| colspan="1" align="center" | [[File:All_your_systems2.png]]
|}

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| rowspan="2" align="center" valign="top" width="50%" | [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
| align="center" valign="top" width="50%" | [[File:Owasp-builders-small.png|link=Builders]]
|-
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* [18 Oct 2018] DragonFly BSD added the OWASP Amass project to DPorts package management.

* [12 Oct 2018] OWASP showcased the Amass project at AppSec USA 2018.

* [11 Sep 2018] FreeBSD added the OWASP Amass project to the Ports package collection.

* [10 Sep 2018] OWASP Amass project was added to the Arch Linux User Repository (AUR).

* [6 Sep 2018] OWASP London Chapter Meeting (Hosted by Facebook) Lightning Talk (remote) to introduce the OWASP Amass project.

* [4 Jul 2018] OWASP announced acceptance of the Amass project on Twitter.

|}

==How can I participate in your project?==

All you have to do is make the Project Leader aware of your available time to [https://github.com/OWASP/Amass/blob/master/CONTRIBUTING.md contribute to the project]. It is also important to let the leader know how you would like to contribute and pitch in to help the project meet its goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leader is key.

==If I am not a programmer can I participate in your project?==

Yes, you can certainly participate in the project if you are not a programmer or technical. The project needs different skills and expertise and different times during its development. Currently, we are looking for researchers, writers, graphic designers, and a project administrator. See the Road Map and Getting Involved tab for more details.

==Contributors==

The first contributors to the project were:

* '''Jeff Foley'''

* '''Mikail Tunç'''

= Road Map and Getting Involved =

==Roadmap==

As of <strong>July, 2018, the highest priorities for the next 12 months</strong> are:
* Feature enhancement: Allow Amass to connect to proxies
* Feature enhancement: Inform users of what Amass will do once an enumeration is executed
* Feature enhancement: Add additional constraints to the enumeration process
* Continue to update data sources that provide DNS names
* Implement additional data handlers that save information gathered into various data stores
* Implement documentation regarding Amass architecture and the enumeration process
* Develop slides and videos to serve as demonstration material

==Getting Involved==

There are many ways you can support the OWASP Amass project. Below are some of the roles that definitely need additional support:

===Coding===

We could implement some of the later items on the roadmap sooner if some Go network programmers wanted to join the project.

===Testing===

Amass leverages concurrency and produces quite a bit of network traffic, which can always use additional testing. Anyone interested in stressing the software and helping to improve its quality is welcome.

===Writing===

The project could currently use technical writers to join the team in order to capture how the software works.
=Project About=
{{Template:Project About
| project_name =OWASP Amass
| project_description = In-depth DNS Enumeration and Network Mapping written in Go
| project_license = Apache License 2.0
| leader_name1 = Jeff Foley
| leader_email1 = jeff.foley@owasp.org
| leader_username1 = caffix
| mailing_list_name =
}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]]
[[Category:OWASP_Builders]]
[[Category:OWASP_Defenders]]
[[Category:OWASP_Tool]]

User:Caffix

2018-09-29T20:50:42Z

Caffix:

[http://www.linkedin.com/in/caffix https://www.owasp.org/images/7/7f/Linkedin-button.png]
[[File:Caffix_BSidesROC.jpeg|left|thumb]]

Jeff Foley is an innovative, results-driven technical leader known for delivering game-changing research findings to overcome real-world challenges. Jeff serves as the US Manager for Penetration Testing & Red Teaming at National Grid and as the CTO & Co-founder of ClaritySec, an Upstate New York based information security startup. Prior to this, he was the Director of Research for the Cyber Systems, Weapon Systems & Sensors Operation at Alion Science & Technology. In his spare time, Jeff enjoys experimenting with new blends of coffee, supporting local university’s information security programs, and participating in information security competitions, such as DEF CON Capture the Flag.

Today Jeff serves as technical adviser to the American Cybersecurity Institute and is a member of the SUNY Polytechnic Institute Cybersecurity Advisory Board, Mohawk Valley Community College Computer Science Advisory Board, (ISC)2 Central New York Chapter Board, and CNY Hackathon Competition Red Team.

'''Find caffix here:'''

-- [https://twitter.com/jeff_foley Twitter]

-- [https://github.com/caffix GitHub]

-- [https://discord.gg/rtN8GMd Discord]

'''Artifacts:'''

-- Ligthning Talk (remote), "Introducing OWASP Amass Project" - [https://www.youtube.com/watch?v=8cOCaPwbr60 Video]

-- Video of the 'Designing your Own Tools: The Amass Penetration Testing Tool' presentation at CNY Hackathon Fall 2017 - [https://www.youtube.com/watch?v=pCqxOk8Yq10 Video]

'''Project Lead and Developer to the following OWASP projects:'''

-- [https://www.owasp.org/index.php/OWASP_Amass_Project Amass DNS Enumeration and Network Mapping Tool Suite]

'''Additional Projects:'''

-- [http://www.cnyhackathon.org CNY Hackathon Competition]

User:Caffix

2018-09-29T20:39:24Z

Caffix:

[http://www.linkedin.com/in/caffix https://www.owasp.org/images/7/7f/Linkedin-button.png]
[[File:Caffix_BSidesROC.jpeg|left|thumb]]

Jeff Foley is an innovative, results-driven technical leader known for delivering game-changing research findings to overcome real-world challenges. Jeff serves as the US Manager for Penetration Testing & Red Teaming at National Grid and as the CTO & Co-founder of ClaritySec, an Upstate New York based information security startup. Prior to this, he was the Director of Research for the Cyber Systems, Weapon Systems & Sensors Operation at Alion Science & Technology. In his spare time, Jeff enjoys experimenting with new blends of coffee, supporting local university’s information security programs, and participating in information security competitions, such as DEF CON Capture the Flag.

Today Jeff participates as technical adviser for the American Cybersecurity Institute and is a member of the SUNY Polytechnic Institute Cybersecurity Advisory Board, Mohawk Valley Community College Computer Science Advisory Board, (ISC)2 Central New York Chapter Board, and CNY Hackathon Competition Red Team.

'''Find caffix here:'''

-- [https://twitter.com/jeff_foley Twitter]

-- [https://github.com/caffix GitHub]

-- [https://discord.gg/rtN8GMd Discord]

'''Artifacts:'''

-- Ligthning Talk (remote), "Introducing OWASP Amass Project" - [https://www.youtube.com/watch?v=8cOCaPwbr60 Video]

-- Video of the 'Designing your Own Tools: The Amass Penetration Testing Tool' presentation at CNY Hackathon Fall 2017 - [https://www.youtube.com/watch?v=pCqxOk8Yq10 Video]

'''Project Lead and Developer to the following OWASP projects:'''

-- [https://www.owasp.org/index.php/OWASP_Amass_Project Amass DNS Enumeration and Network Mapping Tool Suite]

'''Additional Projects:'''

-- [http://www.cnyhackathon.org CNY Hackathon Competition]