tldr/pages/common/amass-intel.md

33 lines
784 B
Markdown
Raw Normal View History

# amass intel
> Collect open source intel on an organisation like root domains and ASNs.
> More information: <https://github.com/owasp-amass/amass/blob/master/doc/user_guide.md#the-intel-subcommand>.
- Find root domains in an IP [addr]ess range:
`amass intel -addr {{192.168.0.1-254}}`
- Use active recon methods:
`amass intel -active -addr {{192.168.0.1-254}}`
- Find root domains related to a [d]omain:
`amass intel -whois -d {{domain_name}}`
- Find ASNs belonging to an [org]anisation:
`amass intel -org {{organisation_name}}`
- Find root domains belonging to a given Autonomous System Number:
`amass intel -asn {{asn}}`
- Save results to a text file:
`amass intel -o {{output_file}} -whois -d {{domain_name}}`
- List all available data sources:
`amass intel -list`