You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/index.md
+61-45Lines changed: 61 additions & 45 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,14 +1,14 @@
1
1
# :simple-owasp: Amass Docs
2
2
3
-
**OWASP Amass** is an open-source, versatile **Attack Surface Intelligence**platform designed to comprehensively map an organization’s footprint. Built for flexibility and depth, Amass combines advanced data collection, network mapping, and OSINT capabilities to deliver detailed insights into physical and digital assets.
3
+
**OWASP Amass** is an open-source, versatile **attack surface intelligence**framework designed to comprehensively map an organization’s footprint. Built for flexibility and depth, Amass combines advanced data collection, network mapping, and OSINT capabilities to deliver detailed insights into physical and digital assets.
4
4
5
5
## **//** Overview
6
6
7
7
[OWASP Amass](https://github.com/owasp-amass) extends **far beyond basic subdomain enumeration**, offering a comprehensive, automated approach to information gathering that reveals the full scope of an entity's **physical** and **digital** footprint.
8
8
9
9
10
10
??? info "Open Asset Model (OAM)"
11
-
The [Open Asset Model](https://51nk0r5w1m.github.io/docs/open-asset-model/) expands traditional specifications by modeling both the **physical** and **digital** structure of a target's asset landscape. Defining **asset types**, their unique **properties**, and the interconnected **relationships** that join them, `OAM` compiles a comprehensive view of the attack surface from an adversarial perspective. Enabling concurrent data collection and querying, `OAM` automates intelligent asset collection, analysis, and visualization.
11
+
The [Open Asset Model](https://owasp-amass.github.io/docs/open-asset-model/) expands traditional specifications by modeling both the **physical** and **digital** structure of a target's asset landscape. Defining **asset types**, their unique **properties**, and the **relationships** that join them, the `OAM` compiles a comprehensive view of the attack surface from an adversarial perspective.
12
12
13
13
---
14
14
@@ -19,7 +19,7 @@ __[Unlocking the Power of OWASP Amass]__ by [@jeff_foley](https://x.com/jeff_fol
19
19
20
20
-**Automated Deployment and Enumeration:** Easily deploy Amass with [Docker Compose](https://docs.docker.com/compose/) for quick, automated asset discovery across multiple domains with minimal configuration.
21
21
22
-
-**Centralized Asset Management with Asset DB:** Use the Asset DB for storing, managing, and retrieving discovered assets, with support for long-term tracking and consistent data collection through the Open Asset Model.
22
+
-**Centralized Asset Management with Asset DB:** Use the Asset DB for storing, managing, and retrieving discovered assets, with support for long-term tracking and consistent data collection via the Open Asset Model.
23
23
24
24
-**Scalable and Flexible Infrastructure:** Designed for enterprise environments, [Docker](https://www.docker.com/products/docker-desktop/) enables scalable deployments of Amass, ensuring consistent attack surface management for organizations of any size.
25
25
@@ -31,30 +31,67 @@ __[Unlocking the Power of OWASP Amass]__ by [@jeff_foley](https://x.com/jeff_fol
31
31
32
32
## :octicons-tools-16: Getting Started
33
33
34
-
Follow these steps to set up the OWASP Amass Project using [Docker Compose](https://docs.docker.com/compose/):
34
+
Users have several options when installing the Amass framework.
35
35
36
-
### Prerequisites
36
+
### Build from Source Code
37
+
38
+
Install the Amass swiss army knife executable in your preferred environment.
39
+
40
+
#### Prerequisites
41
+
42
+
-**Golang:** Intall an up-to-date version of Go on your system. You can download it from the [Go Official Website](https://go.dev).
43
+
44
+
#### Perform the build and installation process
45
+
46
+
```bash
47
+
go install -v github.com/owasp-amass/amass/v5/cmd/amass@main
48
+
```
49
+
50
+
At this point, the binary should be in *$GOPATH/bin*.
51
+
52
+
### Install using Homebrew
53
+
54
+
The OWASP Amass Project maintains a **Homebrew** package.
55
+
56
+
#### Prerequisites
57
+
58
+
-**Homebrew:** Intall an up-to-date version of the package manager on your system. You can download it from the [Homebrew Official Website](https://brew.sh/).
59
+
60
+
#### Perform the build and installation process
61
+
62
+
The following two commands will install Amass into your environment:
63
+
64
+
```bash
65
+
brew tap owasp-amass/amass
66
+
brew install amass
67
+
```
68
+
69
+
### Containerized Execution within Docker Compose
70
+
71
+
Follow these steps to set up Amass using [Docker Compose](https://docs.docker.com/compose/):
72
+
73
+
#### Prerequisites
37
74
38
75
Before you begin, make sure you have the following installed on your system:
39
76
40
-
-**Docker:** Up-to-date intallation running on your system. You can download it from [Docker's Official Website](https://www.docker.com/products/docker-desktop/).
77
+
-**Docker:** Up-to-date intallation running on your system. You can download it from the [Docker Official Website](https://www.docker.com/products/docker-desktop/).
41
78
42
79
-**Docker Compose:** Typically, Docker Compose is bundled with Docker Desktop, but you can verify the installation or install it seperately from
mv amass-docker-compose amass # Optional: Rename the directory to something shorter (e.g., amass)
54
-
cd amass # Navigate to local directory
91
+
cd amass # Navigate to the local repository
55
92
```
56
93
57
-
### Step 2: Configure the Compose Environment
94
+
####Step 2: Configure the Compose Environment
58
95
59
96
**> Open the `assetdb.env` File:**
60
97
@@ -96,7 +133,7 @@ After editing, save the file:
96
133
Open the `config.yaml` file to set the database password to the one you just assigned as `AMASS_PASSWORD`.
97
134
98
135
```bash
99
-
nano ../config.yaml
136
+
nano config.yaml
100
137
```
101
138
102
139
**> Update the Database Password:**
@@ -123,52 +160,28 @@ As before, save the changes using your preferred text editor.
123
160
```
124
161
Uncomment the lines you need, and provide any necessary credentials.
125
162
126
-
### Step 3: Building the Docker Images
163
+
#### Step 3: Building the Docker Images
127
164
128
165
Your **Amass** framework is now configured and ready to be built. [Docker Compose](https://docs.docker.com/compose/) will build the required images and start them correctly when you perform your first Amass command execution.
0 commit comments