Skip to content

Commit df12671

Browse files
committed
update to the main page
1 parent aeb5adc commit df12671

File tree

1 file changed

+61
-45
lines changed

1 file changed

+61
-45
lines changed

docs/index.md

Lines changed: 61 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
# :simple-owasp: Amass Docs
22

3-
**OWASP Amass** is an open-source, versatile **Attack Surface Intelligence** platform designed to comprehensively map an organization’s footprint. Built for flexibility and depth, Amass combines advanced data collection, network mapping, and OSINT capabilities to deliver detailed insights into physical and digital assets.
3+
**OWASP Amass** is an open-source, versatile **attack surface intelligence** framework designed to comprehensively map an organization’s footprint. Built for flexibility and depth, Amass combines advanced data collection, network mapping, and OSINT capabilities to deliver detailed insights into physical and digital assets.
44

55
## **//** Overview
66

77
[OWASP Amass](https://github.com/owasp-amass) extends **far beyond basic subdomain enumeration**, offering a comprehensive, automated approach to information gathering that reveals the full scope of an entity's **physical** and **digital** footprint.
88

99

1010
??? info "Open Asset Model (OAM)"
11-
The [Open Asset Model](https://51nk0r5w1m.github.io/docs/open-asset-model/) expands traditional specifications by modeling both the **physical** and **digital** structure of a target's asset landscape. Defining **asset types**, their unique **properties**, and the interconnected **relationships** that join them, `OAM` compiles a comprehensive view of the attack surface from an adversarial perspective. Enabling concurrent data collection and querying, `OAM` automates intelligent asset collection, analysis, and visualization.
11+
The [Open Asset Model](https://owasp-amass.github.io/docs/open-asset-model/) expands traditional specifications by modeling both the **physical** and **digital** structure of a target's asset landscape. Defining **asset types**, their unique **properties**, and the **relationships** that join them, the `OAM` compiles a comprehensive view of the attack surface from an adversarial perspective.
1212

1313
---
1414

@@ -19,7 +19,7 @@ __[Unlocking the Power of OWASP Amass]__ by [@jeff_foley](https://x.com/jeff_fol
1919

2020
- **Automated Deployment and Enumeration:** Easily deploy Amass with [Docker Compose](https://docs.docker.com/compose/) for quick, automated asset discovery across multiple domains with minimal configuration.
2121

22-
- **Centralized Asset Management with Asset DB:** Use the Asset DB for storing, managing, and retrieving discovered assets, with support for long-term tracking and consistent data collection through the Open Asset Model.
22+
- **Centralized Asset Management with Asset DB:** Use the Asset DB for storing, managing, and retrieving discovered assets, with support for long-term tracking and consistent data collection via the Open Asset Model.
2323

2424
- **Scalable and Flexible Infrastructure:** Designed for enterprise environments, [Docker](https://www.docker.com/products/docker-desktop/) enables scalable deployments of Amass, ensuring consistent attack surface management for organizations of any size.
2525

@@ -31,30 +31,67 @@ __[Unlocking the Power of OWASP Amass]__ by [@jeff_foley](https://x.com/jeff_fol
3131

3232
## :octicons-tools-16: Getting Started
3333

34-
Follow these steps to set up the OWASP Amass Project using [Docker Compose](https://docs.docker.com/compose/):
34+
Users have several options when installing the Amass framework.
3535

36-
### Prerequisites
36+
### Build from Source Code
37+
38+
Install the Amass swiss army knife executable in your preferred environment.
39+
40+
#### Prerequisites
41+
42+
- **Golang:** Intall an up-to-date version of Go on your system. You can download it from the [Go Official Website](https://go.dev).
43+
44+
#### Perform the build and installation process
45+
46+
```bash
47+
go install -v github.com/owasp-amass/amass/v5/cmd/amass@main
48+
```
49+
50+
At this point, the binary should be in *$GOPATH/bin*.
51+
52+
### Install using Homebrew
53+
54+
The OWASP Amass Project maintains a **Homebrew** package.
55+
56+
#### Prerequisites
57+
58+
- **Homebrew:** Intall an up-to-date version of the package manager on your system. You can download it from the [Homebrew Official Website](https://brew.sh/).
59+
60+
#### Perform the build and installation process
61+
62+
The following two commands will install Amass into your environment:
63+
64+
```bash
65+
brew tap owasp-amass/amass
66+
brew install amass
67+
```
68+
69+
### Containerized Execution within Docker Compose
70+
71+
Follow these steps to set up Amass using [Docker Compose](https://docs.docker.com/compose/):
72+
73+
#### Prerequisites
3774

3875
Before you begin, make sure you have the following installed on your system:
3976

40-
- **Docker:** Up-to-date intallation running on your system. You can download it from [Docker's Official Website](https://www.docker.com/products/docker-desktop/).
77+
- **Docker:** Up-to-date intallation running on your system. You can download it from the [Docker Official Website](https://www.docker.com/products/docker-desktop/).
4178

4279
- **Docker Compose:** Typically, Docker Compose is bundled with Docker Desktop, but you can verify the installation or install it seperately from
4380
[Docker Compose Installation](https://docs.docker.com/compose/).
4481

45-
- **Git:** To clone the Amass repository. Download it from [Git's Official Website](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
82+
- **Git:** To clone the Amass repository. Download it from the [Git Official Website](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
4683

47-
### Step 1: Clone the Amass Docker Compose Directory
84+
#### Step 1: Clone the Amass Docker Compose Directory
4885

49-
Start by cloning the OWASP Amass repository, which contains the Docker Compose setup files.
86+
Start by cloning the OWASP Amass repository containing the Docker Compose setup files.
5087

5188
```bash
5289
git clone https://github.com/owasp-amass/amass-docker-compose.git
5390
mv amass-docker-compose amass # Optional: Rename the directory to something shorter (e.g., amass)
54-
cd amass # Navigate to local directory
91+
cd amass # Navigate to the local repository
5592
```
5693

57-
### Step 2: Configure the Compose Environment
94+
#### Step 2: Configure the Compose Environment
5895

5996
**> Open the `assetdb.env` File:**
6097

@@ -96,7 +133,7 @@ After editing, save the file:
96133
Open the `config.yaml` file to set the database password to the one you just assigned as `AMASS_PASSWORD`.
97134

98135
```bash
99-
nano ../config.yaml
136+
nano config.yaml
100137
```
101138

102139
**> Update the Database Password:**
@@ -123,52 +160,28 @@ As before, save the changes using your preferred text editor.
123160
```
124161
Uncomment the lines you need, and provide any necessary credentials.
125162

126-
### Step 3: Building the Docker Images
163+
#### Step 3: Building the Docker Images
127164

128165
Your **Amass** framework is now configured and ready to be built. [Docker Compose](https://docs.docker.com/compose/) will build the required images and start them correctly when you perform your first Amass command execution.
129166

130167
**> Type the following to get started:**
131168

132169
```bash
133-
docker compose run --rm amass enum -active -d example.org # (1)!
170+
docker compose run --rm enum -active -d example.org # (1)!
134171
```
135172

136173
1. If the build process times out, simply execute the command again to resume.
137174

138175

139-
**> Accessing the Web UI:**
140-
141-
You can obtain information about your asset discoveries by accessing the web UI at `http://127.0.0.1:3000`
142-
143-
> All persistent data used exists on your host in the local repo root directory.
144-
145-
> The `assetdb` is a [PostgreSQL](https://www.postgresql.org/) database reachable from your localhost on `port 55432`.
146-
147-
> The `config` files in the local repo are automatically mapped to where components expect to find them in the Docker environment.
148-
149-
!!! tip "Utilize the IP2Location Database"
150-
- **Sign up** for a free [IP2Location LITE](https://lite.ip2location.com/) account.
151-
- **Download Database File:** Download the `IP2LOCATION-LITE-DB11.CSV` and `IP2LOCATION-LITE-DB11.IPV6.CSV` files.
152-
- **Copy Files to the Compose Directory:** Copy the downloaded CSV files into the compose directory:
153-
```bash
154-
cp path/to/IP2LOCATION-LITE-DB11.CSV ./
155-
cp path/to/IP2LOCATION-LITE-DB11.IPV6.CSV ./
156-
```
157-
- **Run the Amass Docker Compose:** While the Amass Docker Compose is up, execute the script to insert the geo information into the database:
158-
```bash
159-
./upload_ip2loc_data.sh
160-
```
161-
162-
163-
## :material-update: Update Process for the Compose Environment
176+
#### :material-update: Update Process for the Compose Environment
164177

165178
**> Make the local repo your current working directory:**
166179

167180
```bash
168181
cd amass
169182
```
170183

171-
**> Shutdown the Amass framework within the Docker environment:**
184+
**> Shutdown the Amass containers within the Docker environment:**
172185

173186
```bash
174187
docker compose down
@@ -185,17 +198,17 @@ cp config/assetdb.env config/config.yaml config/datasources.yaml backups/
185198
**> Update the local repo:**
186199

187200
```bash
188-
git pull origin master
201+
git pull origin main
189202
```
190203

191-
## :material-update: Update Process for the Docker Images
204+
#### :material-update: Update Process for the Docker Images
192205

193206
**> Make the local repo your current working directory:**
194207
```bash
195208
cd amass
196209
```
197210

198-
**> Shutdown the Amass framework within the Docker environment:**
211+
**> Shutdown the Amass containers within the Docker environment:**
199212

200213
```bash
201214
docker compose down
@@ -204,15 +217,18 @@ docker compose down
204217
**> Update components from their GitHub repos:**
205218

206219
```bash
207-
docker compose pull
208220
docker compose build --pull --no-cache
209221
```
210222

223+
### Amass Packages Maintained by a Third Party
224+
225+
[![Packaging status](https://repology.org/badge/vertical-allrepos/amass.svg)](https://repology.org/metapackage/amass/versions)
226+
211227
---
212228

213229
License
214230
--------
215-
Copyright 2017 Jeff Foley
231+
Copyright 2017-2025 Jeff Foley
216232

217233
Licensed under the Apache License, Version 2.0 (the "License");
218234
you may not use this file except in compliance with the License.

0 commit comments

Comments
 (0)