Amass使用方法
简介
Amss官网地址
github地址
不管你是安全研究人员还是运维人员，你都有将本组织的外部攻击面映射出来的需求。这个映射其实说白了就是信息搜集和侦察。
OWASP的Amass项目可以在很大程度上帮助您的组织完成这项工作，这具体取决于您的需求。这篇文章中我们将会着重讲解如何使用Amass去搜集一个组织的外部资产。
我们着重讲解子域名发现技术。我们将这篇文章分成了几部分来使得文章更易阅读，并让读者了解Amass是如何实现这些功能的。这里需要提一下，就是有些外部资产并不一定会被映射成域名，这时你就需要采取其他的技术手段来发现他们了，比如对目标组织的IP范围进行网络扫描。尽管我们不会在这里详尽展示Amass的所有功能，但是我们仍然希望这篇文章能够帮助你起步。
为什么使用OWASP的Amass
大部分的开源子域名、自治号和其他的组织网络资产发现工具都是可用的。尽管这些工具在某些技术方面都非常强大，但是他们常常并没有被人积极维护，并采用当前最新的技术进行工具的更新。因此说句实话，这些工具中的大部分都不是很完善的，而且如果你总是依赖这些很容易误导使用者，让使用者感觉组织的安全性很强以致于漏掉了一些具有漏洞的资产。事实是在很多地方都可以发现组织的子域名，比如社交媒体、Pastebin、源码仓库、HTTP头等等。
Amass背靠OWASP，仅此一点就为结果的准确性和可靠性提供了保障。而且该项目是由专人进行维护的，并且在很长的一段时间内都是会被持续支持的，这意味着任何在将来可能会被发现的bug都会被解决。另外，Amass的采用率相当之高，这代表着更好的数据连贯性和其他工具的集成度。这样一来，Amass就会成为一个更好更值得信赖的工具，而且这样你就可以更好地说服你的客户或者领导采用这款工具进行组织外部资产的映射工作。
出于技术层面的考虑，您应该选择Amass，我们将会在下面进行详尽的描述：
- 包含5个子命令
- amass intel——枚举发现目标
- amass enum——进行网络扫描和枚举
- amass viz——将枚举结果可视化
- amass track——追踪枚举结果中的差异
- amass db——操作Amass的图表数据库
- Amass的子命令可以用来组合，在某些情况下，允许你创建脚本来执行更加多样化的Amass操作
- 支持多达55个数据源，他们都是API和网站，您可以执行以下命令来列出数据源：
- amass enum -list
- 在DNS枚举方面，Amass采用了各种各样的信息搜集技术
- 暴力破解——和子域名挖掘机的原理差不多，就是直接拿字典进行爆破
- 通过读取SSL/TLS证书来、DNS区域传送、检查证书的透明记录来获取子域名
- 在已经发现的域名的基础上进行递归发现（不知道这个子域名递归是个什么技术）网上查了一些文章，大致意思应该是爆破出了a.com，然后就继续爆破a.com的二级域，爆出来b.a.com之后，继续爆破b.a.com的三级域，c.b.a.com
- 用于子域名爆破的Hashcat样式掩码（如果您有关于命名约定等的内部信息，这将非常有用
- Amass支持配置文件，这样使得其更方便使用或者与其他脚本进行集成
我们不会在这篇文章中讲解如何安装Amass，不过如果你感兴趣的话，你可以自己编译，也可以以docker的形式运行，详细的安装指导参考这里
Amass Intel子命令
Amass的intel子命令，可以帮助你发现更多的属于组织的一级域名。想查看该子命令的更过选项，输入以下命令即可：
$ amass intel
[...]
Usage: amass intel [options] [-whois -d DOMAIN] [-addr ADDR -asn ASN -cidr CIDR]
-active
Attempt certificate name grabs
-addr value
IPs and ranges (192.168.1.1-254) separated by commas
-asn value
ASNs separated by commas (can be used multiple times)
[...]
注意，在指定domain的时候必须写成-whois -d DOMAIN的形式。
Amass的所有子命令都保持了参数的一致性。
来看一个示例：
./amass intel -active -whois -d 223mall.com -dir 223mall -o 223mall.res -v -src
输出结果：可以看到，搜索出的一级域名相当之多，当然里面肯定有不准确的，这个需要我们手动进行验证。
[NetworksDB] hatsunemetro.net [NetworksDB] labunraku.jp [NetworksDB] grosier.jp [NetworksDB] kadoya-ouchi.com [NetworksDB] chebayadkard.com [NetworksDB] annjyo-saikakuji-onisi.com [NetworksDB] lukes.biz [NetworksDB] r-room.org [NetworksDB] web-design-list.link [NetworksDB] netz-donan.jp [NetworksDB] desecration-record.com [NetworksDB] aromatico.net [NetworksDB] fureai-st.com [NetworksDB] handstampart.com [NetworksDB] usmle4japanese.org [NetworksDB] tailor-med.com [NetworksDB] kona-tkz.com [NetworksDB] takei-dr.mobi [NetworksDB] led-koukan.info [NetworksDB] nijiirodays.net [NetworksDB] iwakiseikeigeka.com [NetworksDB] otaka-ss.jp [NetworksDB] fareast-gadget.com [NetworksDB] edgar-filho.com [NetworksDB] pegasusclub.co.jp [NetworksDB] hasegawa-seikei.jp [NetworksDB] nitto-oshare.com [NetworksDB] brisian.com [NetworksDB] f-hospice-ikg.com [NetworksDB] nordic-wind.net [NetworksDB] places-inc.com [NetworksDB] yakata27.com [NetworksDB] hatonomori-art.jp [NetworksDB] sposa-veneziana.com [NetworksDB] ygj.co.jp [NetworksDB] amami-reien.jp [NetworksDB] chateaudesaigon.com [NetworksDB] deli-aso.com [NetworksDB] motsulog.com [NetworksDB] mitsublo.com [NetworksDB] recycle-gakki-kaitori.com [NetworksDB] makiyama-office.com [NetworksDB] misonodori.jp [NetworksDB] ekoden.jp [NetworksDB] asobi-works.com [NetworksDB] joho-kan.com [NetworksDB] tochicchi-game.com [NetworksDB] daitopainters.jp [NetworksDB] yamada-hifuka.com [NetworksDB] fuji-vinyl.co.jp [NetworksDB] yoshiaki7.com [NetworksDB] amipf.com [NetworksDB] 12bunno1.jp [NetworksDB] aisho-taikyo.jp [NetworksDB] docyou.jp [NetworksDB] maruikeiki.com [NetworksDB] kaneko-eizou.com [NetworksDB] hakueisha.jp [NetworksDB] smartcool-fushimi.com [NetworksDB] sika-kyujin.com [NetworksDB] digireco.co.jp [NetworksDB] solar3rd.net [NetworksDB] obiss.tech [NetworksDB] tkss.co.jp [NetworksDB] nekonyan-life.com [NetworksDB] kaminoke-up.com [NetworksDB] xn--n8jwmma7h2i762oghe.net [NetworksDB] doomybest.com [NetworksDB] iryo-no-joho.com [NetworksDB] plush5-pt.com [NetworksDB] ccmp-sample.site [NetworksDB] daizen-foods.com [NetworksDB] fleet.co.jp [NetworksDB] fukudashoten.jp [NetworksDB] totaljp.co.jp [NetworksDB] mimurakazuya.net [NetworksDB] sunchase.jp [NetworksDB] uwkcs1501.xyz [NetworksDB] urea-equipment.com [NetworksDB] eiko.gr.jp [NetworksDB] 100mhz.net [NetworksDB] fat-g.jp [NetworksDB] azsa-re.co.jp [NetworksDB] lisefvestergaard.com [NetworksDB] mitsufu.co.jp [NetworksDB] makodiseno.com [NetworksDB] tubakiya-kiharu.com [NetworksDB] energy-twin.com [NetworksDB] kikuchi-fumiaki.com [NetworksDB] car-port.net [NetworksDB] ntc-ltd.jp [NetworksDB] kazblo.com [NetworksDB] affordance.tokyo [NetworksDB] salon-leela.com [NetworksDB] j-auvis.co.jp [NetworksDB] teramako.jp [NetworksDB] denkidenshi.or.jp [NetworksDB] team-maruo.com [NetworksDB] supertomari.com [NetworksDB] starman.biz [NetworksDB] ambio.jp [NetworksDB] maisondenoel.jp [NetworksDB] sawakoyoshida.com [NetworksDB] aoakua.jp [NetworksDB] hirazen.com [NetworksDB] kawakami.net [NetworksDB] hachisuzume.com [NetworksDB] assist-hd.com [NetworksDB] enjoy-clay-shooting.com [NetworksDB] taiyo-ra.com [NetworksDB] avgms.net [NetworksDB] kaiseimaru.jp [NetworksDB] orgabits.com [NetworksDB] biyoushitsu-leaf.com [NetworksDB] iwasakiseikotsuin.jp [NetworksDB] boo-boo.jp [NetworksDB] akiwork.net [NetworksDB] snack-mari.com [NetworksDB] sumi-arch.net [NetworksDB] picarase.net [NetworksDB] myonline.jp [NetworksDB] seikinakao.com [NetworksDB] matsuoka-k.com [NetworksDB] miyata-setubi.com [NetworksDB] zirco.work [NetworksDB] xn--z-r8tx09ntsfgomotw.com [NetworksDB] kakuishi.co.jp [NetworksDB] asomanavi.co.jp [NetworksDB] worldtour.jp [NetworksDB] puzzleringtokyo.com [NetworksDB] patriotdodge.com [NetworksDB] f-kangoren.jp [NetworksDB] one-twin.com [NetworksDB] eight-hair.com [NetworksDB] kengyosyuhu.com [NetworksDB] chouchou-eyelash.com [NetworksDB] cosmos-mie.com [NetworksDB] gsgsupport.net [NetworksDB] plush5.com [NetworksDB] tsk-zeirishi.com [NetworksDB] densangiken.com [NetworksDB] chibasangyo.com [NetworksDB] netosapo.com [NetworksDB] mathildaboots-records.com [NetworksDB] victory-kitashirakawa.com [NetworksDB] smartcool-akashi.com [NetworksDB] wiz-s.net [NetworksDB] hana-gp.jp [NetworksDB] studio-refine.com [NetworksDB] xn--x-d38a606oxzb.net [NetworksDB] lanruisoft.com [NetworksDB] visitmackinawcity.mobi [NetworksDB] tomonikaigo.jp [NetworksDB] dlyryq.com [NetworksDB] chuuboushuuri110.com [NetworksDB] makesuresaipan.com [NetworksDB] kanzengoken.com [NetworksDB] lovecafe-lohas.com [NetworksDB] fujista.jp [NetworksDB] cultico.com [NetworksDB] alexagerrity.com [NetworksDB] shinanoki.jp [NetworksDB] agolfsimulator.com [NetworksDB] o-maru.com [NetworksDB] humanitarianclowns.org [NetworksDB] entameqa.com [NetworksDB] magarikane-h.com [NetworksDB] eu-corp.com [NetworksDB] photoyokohama.com [NetworksDB] tripplanners.jp [NetworksDB] aromatico17.com [NetworksDB] hirokouji.com [NetworksDB] daito55.co.jp [NetworksDB] compassionateleaders.org [NetworksDB] warmheart-project.com [NetworksDB] ariarasearch.com [NetworksDB] kamaboko.or.jp [NetworksDB] sunrise-seiko.jp [NetworksDB] ekore-tokyo.com [NetworksDB] kco888.com [NetworksDB] miwa-seifuku.co.jp [NetworksDB] marunami-foods.com [NetworksDB] toka-kimono.net [NetworksDB] coven23.org [NetworksDB] naomi-thirty-five.com [NetworksDB] office-ikeyama.com [NetworksDB] she-mail.jp [NetworksDB] leciel-5724.com [NetworksDB] shugetsu-doll.jp [NetworksDB] uptokyo.com [NetworksDB] orenookinawa.com [NetworksDB] topdogs.co.jp [NetworksDB] ksimk.net [NetworksDB] ishidasikkiten.com [NetworksDB] anxdj.com [NetworksDB] yanoken.co.jp [NetworksDB] character-edu.com [NetworksDB] bontenmaru.jp [NetworksDB] ad-office.co.jp [NetworksDB] chu-kan.net [NetworksDB] miyagawaseminar.com [NetworksDB] lava.jp [NetworksDB] astepjapan.com [NetworksDB] lifetime.co.jp [NetworksDB] smart-assistant.jp [NetworksDB] taikutsu.info [NetworksDB] jewelry-case.net [NetworksDB] kadoyas.com [NetworksDB] rapidtooling.biz [NetworksDB] bodegasaliciarojas.com [NetworksDB] ymart.co.jp [NetworksDB] riverside-dogpark.com [NetworksDB] nextpr.net [NetworksDB] petit-eng.work [NetworksDB] payashisan.link [NetworksDB] shantikulayoga.jp [NetworksDB] koshigaya-tmo.com [NetworksDB] azuchiya.com [NetworksDB] kishine.com [NetworksDB] dorin-farm.jp [NetworksDB] zome.biz [NetworksDB] hyogokashi.com [NetworksDB] book528.net [NetworksDB] serendipity-booker.jp [NetworksDB] domainekyokohosaka.com [NetworksDB] no1kakeizu.com [NetworksDB] twentytwo.jp [NetworksDB] akagi-company.com [NetworksDB] g-adviser.com [NetworksDB] sc-serv.com [NetworksDB] iiyu.info [NetworksDB] lookinggood.jp [NetworksDB] rere-ve.com [NetworksDB] sanuki-nouengurashi.info [NetworksDB] mainstayy.com [NetworksDB] iwate-oasis.com [NetworksDB] nagano-kenryo.jp [NetworksDB] tcri.jp [NetworksDB] ch02.xyz [NetworksDB] plowandco.com [NetworksDB] talktree-workshop.com [NetworksDB] kemonoya.com [NetworksDB] worklife.tokyo [NetworksDB] ayuko-hb.com [NetworksDB] yamashige-tax.com [NetworksDB] kaitekitai.com [NetworksDB] r-ck.co.jp [NetworksDB] chikaku-navi.com [NetworksDB] transfersmart.org [NetworksDB] female-branding.jp [NetworksDB] i-kmsa.jp [NetworksDB] spot-orino.com [NetworksDB] annapolisartsandcraftsfestival.com [NetworksDB] seisyuji.com [NetworksDB] tomono-kodomo.com [NetworksDB] shoji-lab.jp [NetworksDB] sunknots.com [NetworksDB] e-hatsuden.net [NetworksDB] tr-watabe.com [NetworksDB] xn--uck4a1cj7a2ey818a.net [NetworksDB] abc-rafting.com [NetworksDB] fonwaca.com [NetworksDB] ogawamura.jp [NetworksDB] eikou.works [NetworksDB] kyoto-kanri.com [NetworksDB] puku-ichi.com [NetworksDB] shijyoumae.jp [NetworksDB] kuzuhara-soroban.jp [NetworksDB] xn--x-d38a606oxzb.club [NetworksDB] web-example.com [NetworksDB] seirinzan.com [NetworksDB] xn--hoqrhl65exnpfpb.com [NetworksDB] family-hospice.com [NetworksDB] abe-nouen.com [NetworksDB] ogcy.info [NetworksDB] yadonanten.com [NetworksDB] r-chiro.com [NetworksDB] uokoglobal.com [NetworksDB] ch02.online [NetworksDB] inohiro.com [NetworksDB] english-writing-theaters.com [NetworksDB] xn--vio-r63b4b8ix473b7yqaokx.com [NetworksDB] newartgame.com [NetworksDB] funtv-japan.net [NetworksDB] sansansanko.jp [NetworksDB] kanekoproduction.com [NetworksDB] kensakuinfo.net [NetworksDB] idea-life.biz [NetworksDB] johnnyredrum.com [NetworksDB] arinyan.info [NetworksDB] tai-tennis.com [NetworksDB] yokoso-nihon-he.net [NetworksDB] ooharu-e.co.jp [NetworksDB] osaka-town.net [NetworksDB] sante-g.com [NetworksDB] hinoganka.com [NetworksDB] rakuniwa-rakuen.org [NetworksDB] tokotokowatch.com [NetworksDB] sophia-salon.com [NetworksDB] ccmp-information.com [NetworksDB] hari-naka.com [NetworksDB] thescce.org [NetworksDB] relacion-jp.com [NetworksDB] kakeruya.com [NetworksDB] h-chuo.co.jp [NetworksDB] tech-biz.jp [NetworksDB] b-terastation.com [NetworksDB] ch02.co [NetworksDB] livecross.jp [NetworksDB] theopaulinenestor.com [NetworksDB] swan-group.co.jp [NetworksDB] milkcup.net [NetworksDB] naikaiplant.co.jp [NetworksDB] yosukehealing.net [NetworksDB] mookhouse.jp [NetworksDB] xn--68jv87j27co71br7q.biz [NetworksDB] active-aging.org [NetworksDB] 4btennis.com [NetworksDB] oa-fukuda.com [NetworksDB] seijin-akane.love [NetworksDB] bebolab.com [NetworksDB] adwellart.com [NetworksDB] atelier404.com [NetworksDB] oishi-yuinouten.jp [NetworksDB] ninekessai.com [NetworksDB] kobemasschoir.org [NetworksDB] globa-tennis.com [NetworksDB] f-hospice-odw.com [NetworksDB] hada-clinic.com [NetworksDB] chpress.fun [NetworksDB] tvl-2015.com [NetworksDB] sarasautsugi.com [NetworksDB] izaya.org [NetworksDB] everyone-taiyou.com [NetworksDB] timerun-b.com [NetworksDB] hirokouji.jp [NetworksDB] cedarvalleyrvgolf.com [NetworksDB] eco-atom.co.jp [NetworksDB] jbrk.info [NetworksDB] osakaranchu.com [NetworksDB] ishikawa-yoshihiro.com [NetworksDB] japan-wedding.com [NetworksDB] musicbeliever.net [NetworksDB] oneheart-oshima.com [NetworksDB] aziru.biz [NetworksDB] yamatozakura.com [NetworksDB] kawazucamp.com [NetworksDB] studio-ff.com [NetworksDB] nkc-asia.com [NetworksDB] ch02.fun [NetworksDB] chpress.xyz [NetworksDB] minami-foods.com [NetworksDB] enfc.jp [NetworksDB] tutor-recruit.jp [NetworksDB] mizutani-law.jp [NetworksDB] warin-iyashi.com [NetworksDB] secret-bell.jp [NetworksDB] koshin-mie.com [NetworksDB] towatari.com [NetworksDB] coating1484.com [NetworksDB] dh-bloss.com [NetworksDB] otani-keizo.com [NetworksDB] plush5-blog.com [NetworksDB] donde07.xyz [NetworksDB] icc-mie.com [NetworksDB] kounosu-kg.com [NetworksDB] kondo-biyoshitu.com [NetworksDB] 44nobu.net [NetworksDB] sayalabo.jp [NetworksDB] miurasougu.com [NetworksDB] proto-appli.net [NetworksDB] motehada.info [NetworksDB] okuru.pro [NetworksDB] musiba1251.jp [NetworksDB] doromizu89.com [NetworksDB] safetyrafting.com [NetworksDB] seiren-print.com [NetworksDB] doctorcheck.jp [NetworksDB] sunnyweb.org [NetworksDB] mctokyo.jp [NetworksDB] hagi-ballet.com [NetworksDB] sanuki-nouengurashi.com [NetworksDB] shougakuji-fukui.com [NetworksDB] order-cancel.site [NetworksDB] shimojima-m.com [NetworksDB] bushoji.net [NetworksDB] steelgunner.info [NetworksDB] takeda-sanfujinka.jp [NetworksDB] cl-a.co.jp [NetworksDB] social-v.com [NetworksDB] heero.jp [NetworksDB] daikanyama-neo-senior.jp [NetworksDB] learningforall.or.jp [NetworksDB] yorisoi-reform.com [NetworksDB] art-chiro.biz [NetworksDB] refine-h2.com [NetworksDB] xn--7rvn90i.jp [NetworksDB] corporateownhomes.com [NetworksDB] nakagawa-tokihiko.com [NetworksDB] hatagosakura.jp [NetworksDB] alfa-arch.co.jp [NetworksDB] orgabits-run.com [NetworksDB] goto-meiri.jp [NetworksDB] eikei.net [NetworksDB] design-log.com [NetworksDB] yushi.tokyo [NetworksDB] okappadesign.com [NetworksDB] youandnews.com [NetworksDB] itoshima-clinic.com [NetworksDB] iroha-sasebo.net [NetworksDB] ryofutaibikai.net [NetworksDB] 2souten.com [NetworksDB] livewithpet.com [NetworksDB] f-management.com [NetworksDB] tbc-hyd.com [NetworksDB] kasen-kikou.or.jp [NetworksDB] creight.jp [NetworksDB] educ4all.com [NetworksDB] takahashi-housing.com [NetworksDB] daishinkikou.com [NetworksDB] starrysite.com [NetworksDB] peace-muta.com [NetworksDB] dragon-news.com [NetworksDB] kobamachi.com [NetworksDB] andmerciii.com [NetworksDB] tiwawarecord.com [NetworksDB] job-return.com [NetworksDB] uokan.jp [NetworksDB] gosh-gosh.com [NetworksDB] hiroshibot.jp [NetworksDB] growby.jp [NetworksDB] uptokyo.co.jp [NetworksDB] horioka.net [NetworksDB] f-hospice-nrs.com [NetworksDB] az-trust.info [NetworksDB] ecchinamannga.com [NetworksDB] dogdepo.net [NetworksDB] kokoronoeki.jp [NetworksDB] qudan.net [NetworksDB] espolada.com [NetworksDB] kanagawa-judo.info [NetworksDB] thinkit.club [NetworksDB] xn--pbkv20hisat0dx00alz3a.com [NetworksDB] kurasi-suido.com [NetworksDB] money-twin.info [NetworksDB] kawahara-lab.org [NetworksDB] star-lin.com [NetworksDB] jyakanin.com [NetworksDB] sakeholic.net [NetworksDB] blutenflug.com [NetworksDB] kodawari.club [NetworksDB] act-sys.net [NetworksDB] family-k.org [NetworksDB] gsk3315.com [NetworksDB] chusuke-revolution.com [NetworksDB] sansei-t.com [NetworksDB] e-miti.net [NetworksDB] glzle.com [NetworksDB] orino-cargo.com [NetworksDB] daifuku-oec.net [NetworksDB] ryuichiro-morita.com [NetworksDB] gerogori.com [NetworksDB] neko-mitori.com [NetworksDB] asahigakki.jp [NetworksDB] sangu-shouten.co.jp [NetworksDB] rinne-end.com [NetworksDB] naosuwa.com [NetworksDB] central-support.com [NetworksDB] uoko.jp [NetworksDB] interbankcoop.com [NetworksDB] yamaguchi-ouchi.com [NetworksDB] school-tour.net [NetworksDB] mormor.co.jp [NetworksDB] partandparcelblog.com [NetworksDB] a-sch.co.jp [NetworksDB] openabc.jp [NetworksDB] yoshikokamikura.com [NetworksDB] schoolingsos.com [NetworksDB] 2438mama.com [NetworksDB] neurodive.net [NetworksDB] ondemand-navi.net [NetworksDB] izmcci.or.jp [NetworksDB] lakepia-angel.jp [NetworksDB] kairos-company.com [NetworksDB] energysymposium.jp [NetworksDB] b3-bikyaku.com [NetworksDB] mizuno-museum.jp [NetworksDB] koro2net.com [NetworksDB] d-brand.biz [NetworksDB] mukunomichiko.com [NetworksDB] f-hospice-kmm.com [NetworksDB] anzynail.com [NetworksDB] oriental-trust.com [NetworksDB] yamamotosoftware.jp [NetworksDB] matsuken.tokyo [NetworksDB] sekisan-kigyoutai.com [NetworksDB] poplar-koubou.com [NetworksDB] soka-kusuri.org [NetworksDB] resort-assist.com [NetworksDB] kamisabou.com [NetworksDB] interfood.org [NetworksDB] ad-daiwa.co.jp [NetworksDB] mrt-hairworks.com [NetworksDB] kyoto10.com [NetworksDB] yamauchi220886.com [NetworksDB] osekkainote.com [NetworksDB] pirika.info [NetworksDB] p-map.net [NetworksDB] trdc-union.org [NetworksDB] 9muta.com [NetworksDB] f-hospice-liv.com [NetworksDB] aritaseibu.co.jp [NetworksDB] haute-couture-care.com [NetworksDB] yotsubayo.com [NetworksDB] ryoko-shikaku.com [NetworksDB] liuyi.jp [NetworksDB] tenbai-world.com [NetworksDB] kaigyo-support.com [NetworksDB] napaliko.com [NetworksDB] neromiu.net [NetworksDB] imc-j.com [NetworksDB] ogawa-aco.com [NetworksDB] katenshikou.net [NetworksDB] biolleta.com [NetworksDB] daikanyamashoutenkai.com [NetworksDB] malibunative.jp [NetworksDB] komatsuyacleaning.com [NetworksDB] saiga.jp [NetworksDB] honmokuvespa.com [NetworksDB] kansai-talent.com [NetworksDB] sukawa.co.jp [NetworksDB] tenjikuseikotu.com [NetworksDB] massage-sasih.com [NetworksDB] iptec.jp [NetworksDB] twotwoall.shop [NetworksDB] mos-trial-demo.jp [NetworksDB] irantraveltour.com [NetworksDB] welinaeyelash.com [NetworksDB] kitanoki-museum.jp [NetworksDB] hiyoshigolf.jp [NetworksDB] girlymammy.com [NetworksDB] tokoya-oshima.net [NetworksDB] shuwatamago.com [NetworksDB] utsugi-metal.com [NetworksDB] sen-tec.jp [NetworksDB] tokyo-ritual.jp [NetworksDB] kanetatsu.com [NetworksDB] sophos.jp [NetworksDB] ganeshadining.com [NetworksDB] kamedakodomo.com [NetworksDB] monolyze.net [NetworksDB] reisworks.com [NetworksDB] kawanabe-hs-tokyo.com [NetworksDB] srtb-penguin.com [NetworksDB] btnv.jp [NetworksDB] samuraitz.com [NetworksDB] tokyo-sera.org [NetworksDB] aichi-edu.info [NetworksDB] apress31.net [NetworksDB] gazo-chiba-u.jp [NetworksDB] sonic-co.com [NetworksDB] shingaku-baigan.com [NetworksDB] amagan.biz [NetworksDB] ichi-design.jp [NetworksDB] krimp.jp [NetworksDB] henda.global [NetworksDB] takehana.co.jp [NetworksDB] amie-hair-room.com [NetworksDB] boncy.net [NetworksDB] densangiken.co.jp [NetworksDB] npo-uwsua.org [NetworksDB] rxrx.jp [NetworksDB] mikisyo.com [NetworksDB] ebisuphoto.com [NetworksDB] e-shougenji.com [NetworksDB] tgelias.com [NetworksDB] urban-modelling.org [NetworksDB] total-agent.biz [NetworksDB] kasa-horiguchi.tokyo [NetworksDB] shizukasuzuki.com [NetworksDB] hitoyoshibicycle.jp [NetworksDB] zuiryo-aidfund.org [NetworksDB] madoripro.com [NetworksDB] koizumicar.xyz [NetworksDB] asiantex.net [NetworksDB] nowtrecords.org [NetworksDB] kgcompany524.com [NetworksDB] tokyomamans.com [NetworksDB] kawabatafood.com [NetworksDB] mops-pr.net [NetworksDB] dii.jp [NetworksDB] le-plumage.com [NetworksDB] sac-home.com [NetworksDB] looop1205.com [NetworksDB] nasuhara.jp [NetworksDB] shigeki-hiratsuka.com [NetworksDB] syunshokurakushou-tsuru.net [NetworksDB] d-yamashige.com [NetworksDB] zeta-inc.jp [NetworksDB] c-and-c-tuo.com [NetworksDB] misao-photo.co.jp [NetworksDB] nekosaikou.com [NetworksDB] kfc-net.net [NetworksDB] ryuichiro-morita.net [NetworksDB] tamagawagolfclub.com [NetworksDB] 19mouzai.net [NetworksDB] my-car-tetsuzuki.com [NetworksDB] mila-la.jp [NetworksDB] azuma-con.jp [NetworksDB] tamagawa-pa.com [NetworksDB] yusuke2453.com [NetworksDB] r-hitoma-blog.com [NetworksDB] riseworld.co.jp [NetworksDB] watarutaru.com [NetworksDB] xn--ruqu89imbjfmh.com [NetworksDB] sunboot.jp [NetworksDB] pinpointop.com [NetworksDB] riritop.com [NetworksDB] 2950.info [NetworksDB] koshin-kanzai.com [NetworksDB] shikyoiku.net [NetworksDB] sk-world-led.com [NetworksDB] kasumitei.com [NetworksDB] praigy.com [NetworksDB] niboshi-marume.co.jp [NetworksDB] gazo-dosokai.jp [NetworksDB] yunyuujyuutaku.com [NetworksDB] miki-den.com [NetworksDB] nenogongen.jp [NetworksDB] wagayado.com [NetworksDB] kansokuhou-osaka.net [NetworksDB] 11inu.net [NetworksDB] ja-ichihara.com [NetworksDB] ryo-studio.jp [NetworksDB] graphish.jp [NetworksDB] fujiwara-p.com [NetworksDB] erimo-shokokai.com [NetworksDB] ggbgospelsound.com [NetworksDB] torori103.com [NetworksDB] inunohuku.net [NetworksDB] antiracism-info.com [NetworksDB] camiretreat.com [NetworksDB] tsutenkaku-hondori.com [NetworksDB] rise-sec.jp [NetworksDB] xn--u9jvbw25vrogwnr7yb9y9i.com [NetworksDB] nacamonaca.com [NetworksDB] garagehomey.com [NetworksDB] kansai-hope.com [NetworksDB] pal-design.jp [NetworksDB] ezawa-shouji.com [NetworksDB] milala-info.jp [NetworksDB] happyhoursomewhere.com [NetworksDB] principal-kobe.com [NetworksDB] cuse-co.com [NetworksDB] seo-ken.org [NetworksDB] coffee-brownie.jp [NetworksDB] koistory.info [NetworksDB] le-citronnier-yokohama.com [NetworksDB] nkc-investment.com [NetworksDB] softg-dev.com [NetworksDB] iroha-nihongo.tokyo [NetworksDB] aobadai.jp [NetworksDB] magictokyoo.com [NetworksDB] ishikawasekiyu.com [NetworksDB] hinata.or.jp [NetworksDB] mirokuji.biz [NetworksDB] 100nen.company [NetworksDB] feelmusic.jp [NetworksDB] jp-legal.net [NetworksDB] adb-bike.com [NetworksDB] minnanoomise.net [NetworksDB] school-wise.jp [NetworksDB] nagaikensetu.net [NetworksDB] sasakikoumuten.jp [NetworksDB] katsuwodenbu.com [NetworksDB] kiyota-touseki.com [NetworksDB] ochikasei.co.jp [NetworksDB] tanosi.jp [NetworksDB] air-atlas.net [NetworksDB] chefwendymae.com [NetworksDB] hanwafoods.co.jp [NetworksDB] egusa.net [NetworksDB] momochishoukai.com [NetworksDB] ehime-swh.jp [NetworksDB] dentsuman.com [NetworksDB] hand-over.jp [NetworksDB] kodawaricosme.com [NetworksDB] twentytwo.tokyo [NetworksDB] ibazoukyo.com [NetworksDB] kobe-bridal.jp [NetworksDB] mahogany-kagawa.xyz [NetworksDB] ogata-co.com [NetworksDB] tamurabuilds-haginagato.com [NetworksDB] oldyorklibrary.org [NetworksDB] yuge-cpa.com [NetworksDB] kococheers.com [NetworksDB] satohjimusyo.com [NetworksDB] kamidoko.com [NetworksDB] yoshi-k.jp [NetworksDB] jsrdc.org [NetworksDB] blt-force.com [NetworksDB] hot-yokohama.com [NetworksDB] reportbike.com [NetworksDB] amigo.love [NetworksDB] sankaku.org [NetworksDB] tubetizer.com [NetworksDB] azriee.com [NetworksDB] be-you8.com [NetworksDB] mikcorp.net [NetworksDB] nishidate.com [NetworksDB] aroma-kokua.com [NetworksDB] planetarybards.net [NetworksDB] itopoid.net [NetworksDB] komakita.nagoya [NetworksDB] tokyoarchi.com [NetworksDB] gaiheki-chosa.com [NetworksDB] sayonaranikibi.org [NetworksDB] aihondou-tm.jp [NetworksDB] angeleek.net [NetworksDB] logo-box.net [NetworksDB] sensyu-club.com [NetworksDB] feelings-seitai.com [NetworksDB] seiji.org [NetworksDB] conductor.jp [NetworksDB] yanakaginza.net [NetworksDB] gallerykashigoya.com [NetworksDB] unclebob-app.com [NetworksDB] haikyobu.com [NetworksDB] himeji-zeirisi.com [NetworksDB] desdeacaweb.com [NetworksDB] sstyle1975.com [NetworksDB] azathoth.jp [NetworksDB] hayabusaboy.com [NetworksDB] fuchu-group.org [NetworksDB] mybestie.app [NetworksDB] twotwoall.jp [NetworksDB] sasaki-seika.com [NetworksDB] minami-law.com [NetworksDB] affilitop.com [NetworksDB] pokepo.jp [NetworksDB] nek-o.net [NetworksDB] junko-ishihara.com [NetworksDB] vinaiota.com [NetworksDB] iwakibv.org [NetworksDB] masterbazi.com [NetworksDB] arimatu-clinic.com [NetworksDB] ginzanadeshiko.com [NetworksDB] ogidenki.com [NetworksDB] takeda-kodomo-clinic.com [NetworksDB] oominegumi.com [NetworksDB] pikatto.net [NetworksDB] hitomiortho.com [NetworksDB] nakakura-home.com [NetworksDB] kanasiiwarai.com [NetworksDB] smcak.jp [NetworksDB] gakushu.info [NetworksDB] montertherapie-zuci.com [NetworksDB] xn--l8j7a0c7a5g2497avwxa.com [NetworksDB] iair-infotech.com [NetworksDB] adagency.jp [NetworksDB] mennonite.jp [NetworksDB] kanagawa-fsc.com [NetworksDB] zatto.jp [NetworksDB] eiri-japan.co.jp [NetworksDB] ekokuukan.com [NetworksDB] startupluv.com [NetworksDB] iwamoto-glass.xyz [NetworksDB] toriyama-ganka.com [NetworksDB] madoka8jo.tokyo [NetworksDB] dentsutanteki.com [NetworksDB] crock-up.com [NetworksDB] f-hospice-hgd.com [NetworksDB] biyoukiki-kaitori.com [NetworksDB] xn--eckycgu1ezdtb0709ecfcqv2c144f.net [NetworksDB] enjoymatsuyama.com [NetworksDB] mirunsan.com [NetworksDB] jyumyouzanshoufukuji.com [NetworksDB] cuorea.com [NetworksDB] asunico.com [NetworksDB] lalanurse.net [NetworksDB] aimug.jp [NetworksDB] fourstar.work [NetworksDB] denshishoseki-navi.net [NetworksDB] dr-navi.com [NetworksDB] datenoichi.co.jp [NetworksDB] noma-lgf.jp [NetworksDB] oc-paro.net [NetworksDB] rf-clayflower.com [NetworksDB] coon.tokyo [NetworksDB] eichitwo.com [NetworksDB] hinabeyorocobu.com [NetworksDB] lablanche.jp [NetworksDB] hamaokaseitaiin.com [NetworksDB] 6mon.tokyo [NetworksDB] miz-ken.com [NetworksDB] noriko-ogawa.com [NetworksDB] softg.co.jp [NetworksDB] unitecoms.jp [NetworksDB] giovepluvio.com [NetworksDB] ial.jp [NetworksDB] k-takamori.co.jp [NetworksDB] xn--n8jaa3a4lznlc3bg5qrnw502am2hx90n.com [NetworksDB] xn--cckd2d4bm9hweva3fx074j45h.com [NetworksDB] neo-sports.jp [NetworksDB] ato-tugi.com [NetworksDB] hashbridge.tokyo [NetworksDB] shantikulayoga.com [NetworksDB] n-cosmos.com [NetworksDB] fukuokahakumon.com [NetworksDB] ju-store.com [NetworksDB] moneynews.tokyo [NetworksDB] totalline.co.jp [NetworksDB] mob-online.com [NetworksDB] ptitika.com [NetworksDB] dogmei.com [NetworksDB] noy-d.com [NetworksDB] anchor-nippon.com [NetworksDB] a-cell-japan.com [NetworksDB] mio-salon.com [NetworksDB] funtv-japan.com [NetworksDB] nekotoliving.com [NetworksDB] adonaicheese.com [NetworksDB] f-hospice-yhm.com [NetworksDB] web-children.com [NetworksDB] koutouen.jp [NetworksDB] unnun.com [NetworksDB] denshinsya.com [NetworksDB] kurachi-shikoujyo.jp [NetworksDB] tatsuo-f.jp [NetworksDB] chieko-kojima.com [NetworksDB] katenshikou.com [NetworksDB] jointstyle.com [NetworksDB] nutrition-platform.org [NetworksDB] vannai.jp [NetworksDB] minamiyamate.jp [NetworksDB] sazan-reef.com [NetworksDB] ms-english.jp [NetworksDB] bjoin.net [NetworksDB] kyoto-muromachi-st.jp [NetworksDB] la-viebelle.com [NetworksDB] kippu18.com [NetworksDB] familyhospis.com [NetworksDB] semista.com [NetworksDB] mapkist.com [NetworksDB] furuken.jp [NetworksDB] sharion.jp [NetworksDB] taiken-kobo.com [NetworksDB] tokyo-library.com [NetworksDB] venture-sp.com [NetworksDB] saikishokuhin.com [NetworksDB] kurashiirodori.com [NetworksDB] libido-labo.pink [NetworksDB] poprally.net [NetworksDB] asobibank-creation.com [NetworksDB] mononoke.jp [NetworksDB] horiuni.com [NetworksDB] xn--3kqta193aw6tqyk.net [NetworksDB] live-japan.net [NetworksDB] pubbnet.com [NetworksDB] links-mart.com [NetworksDB] garasu.jp [NetworksDB] s-kouenji.com [NetworksDB] mitohama.com [NetworksDB] millennium-net-plaza.com [NetworksDB] creation-sol.com [NetworksDB] kqtokyo.com [NetworksDB] wafflewaffle.info [NetworksDB] asomanavi.com [NetworksDB] eugenius.jp [NetworksDB] ym-sys.work [NetworksDB] ccmp.life [NetworksDB] grannyhadone.biz [NetworksDB] alldeis.com [NetworksDB] aperolargentina.com [NetworksDB] bic-foodproduce.jp [NetworksDB] ch02.link [NetworksDB] forestacademy.jp [NetworksDB] kawshita-carbonic.com [NetworksDB] yuzuru.com [NetworksDB] nixonlibraryfoundation.org [NetworksDB] la-chouchou.net [NetworksDB] standarrow.com [NetworksDB] ikeya-corp.jp [NetworksDB] chickenpecker.com [NetworksDB] egostatetherapy.jp [NetworksDB] berufort.ac.jp [NetworksDB] ban-pro.net [NetworksDB] carport.to [NetworksDB] f-hospice-ikg2.com [NetworksDB] noxcounseling.org [NetworksDB] xn--ecklz8ppb5cc7e.club [NetworksDB] xn--n8jwkwb3dk8c1305ah2e601eq39a4p3b.net [NetworksDB] parasolstoyota.net [NetworksDB] seturitu-himeji.com [NetworksDB] banogenggo.com [NetworksDB] growing-boy.com [NetworksDB] hokushin-cl.co.jp [NetworksDB] f-hospice-snm.com [NetworksDB] dspplanning.com [NetworksDB] chirokasugai.info [NetworksDB] micomico.co.jp [NetworksDB] awai-clinic.or.jp [NetworksDB] central-limousine.net [NetworksDB] kagoshima-data.com [NetworksDB] onogymclub.com [NetworksDB] enotecaitaliana-jp.com [NetworksDB] ofa-freshgreen.com [NetworksDB] xn--hckh0ko84qy5za.com [NetworksDB] gcr-e.co.jp [NetworksDB] mt-photo.jp [NetworksDB] katou.com [NetworksDB] fussmedi.net [NetworksDB] dadasalad.com [NetworksDB] kishine.net [NetworksDB] comonstichting.org [NetworksDB] jinpuukai.or.jp [NetworksDB] redlightjapan.com [NetworksDB] shiragazome4you.com [NetworksDB] villagerambler.com [NetworksDB] change-mind.com [NetworksDB] morionza.com [NetworksDB] sabannaman.com [NetworksDB] petanko-club.com [NetworksDB] bonbu.jp [NetworksDB] makoto-arai.media [NetworksDB] wendymichellesanders.com [NetworksDB] lethyase.com [NetworksDB] xn--fdk6bubz62x972e.net [NetworksDB] dazaikentei.com [NetworksDB] nakamoto-seihon.com [NetworksDB] u18wwc2012.com [NetworksDB] naha-navi.com [NetworksDB] block-st.com [NetworksDB] brown-kagoshima.com [NetworksDB] hokutocorporation.net [NetworksDB] itik.net [NetworksDB] tsubasa.ed.jp [NetworksDB] ongraph49.com [NetworksDB] xarius.jp [NetworksDB] wacooplu.jp [NetworksDB] m-i-o.biz [NetworksDB] yamano-ie.jp [NetworksDB] fukusyachou.com [NetworksDB] watayan.net [NetworksDB] miii.me [NetworksDB] atlas-seikeigakuin.com [NetworksDB] cocoronohane.com [NetworksDB] bt-tsukuba.jp [NetworksDB] sasaki-seikotu-shinkyu.com [NetworksDB] salestips.biz [NetworksDB] takagi-foods.com [NetworksDB] cwpublishinghouse.com [NetworksDB] movie-sketch.com [NetworksDB] kifudepot.net [NetworksDB] dentatsu.org [NetworksDB] citta-iga.jp [NetworksDB] s-seikouen.com [NetworksDB] tumunui.jp [NetworksDB] ast-support.com [NetworksDB] parts-beauty-luna.com [NetworksDB] ymk-reform.com [NetworksDB] yu-u-shin.com [NetworksDB] pv-tech.co.jp [NetworksDB] bellhome.info [NetworksDB] atozuke-iot.net [NetworksDB] noma-bcd.jp [NetworksDB] il-kr.com [NetworksDB] onionpeace.com [NetworksDB] ecology-kure.com [NetworksDB] progettista.biz [NetworksDB] wakamizu-kaigo.com [NetworksDB] art-esthe.biz [NetworksDB] bar-11.jp [NetworksDB] urukaitori.net [NetworksDB] chihuahua-record.com [NetworksDB] iida-office.jp [NetworksDB] metro-hair.jp [NetworksDB] f-hospice-hrk.com [NetworksDB] waka3s.net [NetworksDB] dashintenken.com [NetworksDB] tsk-zeirishi.net [NetworksDB] daikyo-dk.jp [NetworksDB] akabane-shimada-ganka.com [NetworksDB] rafting-guide.net [NetworksDB] tec8kazuhiko.com [NetworksDB] jdentalaroma.com [NetworksDB] bangivanzabdul.net [NetworksDB] nagaoka-gyousei.com [NetworksDB] adpro-net.com [NetworksDB] aoyagitatamiten.jp [NetworksDB] shock-wave.net [NetworksDB] exagame.org [NetworksDB] spmatsudo.com [NetworksDB] xn--xxt99aq41cwd535k.com [NetworksDB] izaya.info [NetworksDB] piacevole-niigata.com [NetworksDB] tokyo-yobiko.jp [NetworksDB] koizumicar.com [NetworksDB] kamiogawa.net [NetworksDB] onoe-kaikei.com
这个子命令会使用很多的信息搜集工具和数据源，比如WHOIS和IPv4Info，这些数据源默认都会被采用，除非你在配置文件中明确禁用了这些数据源。你可以在这里查看示例配置文件
$ amass intel -d owasp.org -whois appseceu.com owasp.com appsecasiapac.com appsecnorthamerica.com appsecus.com [...] owasp.org appsecapac.com appsecla.org [...]
你可以通过手动浏这些数据源来检查该工具返回的结果是否准确。在下面的截图中你可以看到我们在viewdns.info网站中获取到的OWASP Foundation的子域名信息：
在使用Amass的intel子命令的时候你还可以使用其他的选项，比如-active参数，该参数会尝试使用区域传送和其他的主动扫描来获取SSL/TLS证书并提取出有用的信息。
Amass的结果并不总是准确的，这通常是由于以下几个原因造成的，例如Amass使用的数据源更新不够及时。Amass会尝试使用DNS查询来验证结果是否准确，在将来更多的验证手段会被使用。尽管Amass表现得很好，用户仍然应该对结果进行验证，以排除与目标无关的结果。我们可以采用一系列的手段来达到以上目的：
- 使用工具来解析域名，比如dig、nslookup
- 使用WHOIS查询来获取组织的详细信息
- 通过搜索引擎进行检验
你也可以使用intel子命令的-org选项来返回查询组织的ASN号，下面是一个例子：
$ amass intel -org 'Example Ltd' 111111, MAIN_PRODUCT -- Example Ltd 222222, SECONDARY_PRODUCT - Example Ltd [...] Please note that the above data is fictious for demonstration purposes. Retrieved ASN IDs could then be fed back into Amass. The below command attempts to retrieve parent domains on the specified ASN ID and return them along with the IP address they resolve to (127.0.0.1 in this case for demonstration purposes): $ amass intel -active -asn 222222 -ip some-example-ltd-domain.com 127.0.0.1 [...]
Amass枚举 enum子命令
这是Amass最强大的功能，枚举结果会被存储到Amass的数据库中，这个数据库可以在Amass的默认输出文件夹或者用户指定的输出（-dir选项）目录中找到，同时enum也是Amass的另一个子命令。
使用enum子命令快速列出目标子域名，根据上面使用intel子命令发现的目标的一级域名快速发掘出子域名：
./amass enum -passive -d 223mall.com -src
上面的是被动模式，使用-active选项指定主动模式，这种模式下能够搜集更多的子域名，准确性也会比较高
使用Amass的主动模式和被动模式
Amass可以根据用户的配置在主动和被动模式下运行。被动模式相对主动模式会快很多，此模式下的Amass并不会验证DNS信息的准确性。你可以使用-passive选项来启用此模式，该模式下很多的技术和配置都不会被启用，比如DNS解析和验证。下面是几个选择使用passive模式来进行资产搜集的理由：
- 你想要知道所有可能的域名
- 你们的外围安全检测后面会验证DNS信息的准确性，并且想要快速地得到所有的域名信息
- 由于安全检测的某些限制和要求，你只能进行被动搜集
在下面的这个例子中，我们使用被动模式搜集了owasp.org的子域名，并且使用-src选项告知Amass显示子域名的信息来源：
$ amass enum -passive -d owasp.org -src [...] [ThreatCrowd] update-wiki.owasp.org [...] BufferOver] my.owasp.org [Crtsh] www.lists.owasp.org [Crtsh] www.ocms.owasp.org [...] Querying VirusTotal for owasp.org subdomains Querying Yahoo for owasp.org subdomains [...]
在这方面多做些陈述完全是值得的，因为虽然Amass的intel子命令可以帮助我们搜集目标组织的IP范围、ASN号以及组织所拥有的父域，但是enum子命令会验证所有的子域。在我的测试机器上，Amass在两分钟内完成了枚举进程，下面的截图展示了枚举结果：
使用Amass的主动模式意味着你将会拥有更加精确的结果以及更多的目标资产（因为主动模式会启用所有的DNS枚举技术）。
下面这条命令基本上启用了所有主动发现技术：
$ amass enum -active -d owasp.org -brute -w /root/dns_lists/deepmagic.com-top50kprefixes.txt -src -ip -dir amass4owasp -config /root/amass/config.ini -o amass_results_owasp.txt
我们上面使用的命令指定了Amass的表格数据库被存放到amass4owasp目录。同时我们使用-src和-ip选项要求Amass分别显示子域名和IP数据的来源。我们还使用-w选项向Amass提供了deepmagic的DNS字典，另外就是使用-config选项指定了Amass的配置文件位置以及输出结果位置（-o选项）
希望上面的命令我已经讲解得够清楚了，不过我们还是又提供了一些值得注意的地方：
- 在上面的示例中，Amass会检查配置文件中是否配置了其他的DNS解析服务器，如果没有就继续使用Amass内嵌的DNS服务器。除了在配置文件中进行配置以外，你也可以使用-r或者-rf选项来指定自己的DNS服务器。-r和-rf的不同就是，-r只能制定一个DNS服务器的IP地址，-rf可以指定一个文件，该文件中包含着一堆DNS服务器的地址。
- 其实我们可以把上面的选项都写进配置文件中，然后在命令行中就只写一个-config指定配置文件就行了。命令行中的选项的优先级比配置文件高，也就是说命令行中的选项指定的值会覆盖配置文件中指定的值。
- 上面的命令会执行DNS递归枚举操作，因为这个枚举是默认的，除非在命令行中明确指定了-norecursive选项。
需要注意的地方是，如果你在短时间内使用Amass进行了多个目标的信息搜集操作，那么你的IP可能会被Google、Yahoo等Amass默认的一些数据源block掉。
下面让我们以一种比较有趣的方式来总结这一章的内容，假设出于某些原因，OWASP组织想要创建一些以zzz作为前缀的子域名，比如zzz-dev.owasp.org。这时你可以使用Amass的hash-cat风格的字典掩码特性来爆破所有zzz前缀的子域名：zzz-[a-z][a-z][a-z].owasp.org：
$ amass enum -d owasp.org -norecursive -noalts -wm "zzz-?l?l?l" -dir amass4owasp
可以看到，我们在上面那条命令中明确指定了-norecursive来关闭子域名递归枚举，因为我们只想使用hash-cat掩码的方式快速得到结果。
最后，你总是可以在Amass的结果输出目录中查看Amass的log来确保你的配置是正确的：
Amass Track子命令
在我看来，Track子命令是Amass第二大有用的子命令，该命令主要是用于对比前后两次针对同一目标的扫描结果的差异，效果如下：
$ amass track -config /root/amass/config.ini -dir amass4owasp -d owasp.org -last 2
Amass可视化 viz子命令和db子命令
Amass db子命令
该子命令主要是用于和Amass的图标数据库进行交互。