search

owasp-amass / amass

In-depth attack surface mapping and asset discovery
https://owasp.org/www-project-amass/
Other
12.02k stars 1.88k forks source link

Does amass enum -passive work now? #438

Closed gy741 closed 4 years ago

gy741 commented 4 years ago

Hello,

Hmm...

I don't get any results after 10 minutes.

root@go:~# sudo snap install amass
2020-07-22T07:12:41Z INFO Waiting for restart...
amass 3.8.0 from Jeff Foley (caffix) installed
root@go:~# amass

        .+++:.            :                             .+++.
      +W@@@@@@8        &+W@#               o8W8:      +W@@@@@@#.   oW@@@W#+
     &@#+   .o@##.    .@@@o@W.o@@o       :@@#&W8o    .@#:  .:oW+  .@#+++&#&
    +@&        &@&     #@8 +@W@&8@+     :@W.   +@8   +@:          .@8
    8@          @@     8@o  8@8  WW    .@W      W@+  .@W.          o@#:
    WW          &@o    &@:  o@+  o@+   #@.      8@o   +W@#+.        +W@8:
    #@          :@W    &@+  &@+   @8  :@o       o@o     oW@@W+        oW@8
    o@+          @@&   &@+  &@+   #@  &@.      .W@W       .+#@&         o@W.
     WW         +@W@8. &@+  :&    o@+ #@      :@W&@&         &@:  ..     :@o
     :@W:      o@# +Wo &@+        :W: +@W&o++o@W. &@&  8@#o+&@W.  #@:    o@+
      :W@@WWWW@@8       +              :&W@@@@&    &W  .o#@@W&.   :W@WWW@@&
        +o&&&&+.                                                    +oooo.

                                                                      v3.8.0
                                           OWASP Amass Project - @owaspamass
                         In-depth Attack Surface Mapping and Asset Discovery

Usage: amass intel|enum|viz|track|db|dns [options]

  -h    Show the program usage message
  -help
        Show the program usage message
  -version
        Print the version number of this Amass binary

Subcommands:

        amass intel - Discover targets for enumerations
        amass enum  - Perform enumerations and network mapping
        amass viz   - Visualize enumeration results
        amass track - Track differences between enumerations
        amass db    - Manipulate the Amass graph database
        amass dns   - Resolve DNS names at high performance

The user's guide can be found here:
https://github.com/OWASP/Amass/blob/master/doc/user_guide.md

An example configuration file can be found here:
https://github.com/OWASP/Amass/blob/master/examples/config.ini

The Amass tutorial can be found here:
https://github.com/OWASP/Amass/blob/master/doc/tutorial.md

root@go:~#  amass enum -passive -d owasp.org -src
Querying Wayback for owasp.org subdomains
Querying RapidDNS for owasp.org subdomains
Querying Riddler for owasp.org subdomains
Querying Robtex for owasp.org subdomains
Querying SecurityTrails for owasp.org subdomains
Querying URLScan for owasp.org subdomains
Querying ViewDNS for owasp.org subdomains
Querying Shodan for owasp.org subdomains
Querying SiteDossier for owasp.org subdomains
Querying Spyse for owasp.org subdomains
Querying Sublist3rAPI for owasp.org subdomains
Querying ThreatCrowd for owasp.org subdomains
Querying ThreatMiner for owasp.org subdomains
Querying UKGovArchive for owasp.org subdomains
Querying VirusTotal for owasp.org subdomains
Querying AlienVault for owasp.org subdomains
Querying CIRCL for owasp.org subdomains
Querying Censys for owasp.org subdomains
Querying CertSpotter for owasp.org subdomains
Querying Chaos for owasp.org subdomains
Querying CommonCrawl for owasp.org subdomains
Querying ArchiveIt for owasp.org subdomains
Querying Ask for owasp.org subdomains
Querying Baidu for owasp.org subdomains
Querying BinaryEdge for owasp.org subdomains
Querying Bing for owasp.org subdomains
Querying Brute Forcing for owasp.org subdomains
Querying BufferOver for owasp.org subdomains
Querying BuiltWith for owasp.org subdomains
Querying C99 for owasp.org subdomains
Querying Mnemonic for owasp.org subdomains
Querying DNSDumpster for owasp.org subdomains
Querying DNSTable for owasp.org subdomains
Querying FacebookCT for owasp.org subdomains
Querying GitHub for owasp.org subdomains
Querying GoogleCT for owasp.org subdomains
Querying HackerOne for owasp.org subdomains
Querying HackerTarget for owasp.org subdomains
Querying LoCArchive for owasp.org subdomains
Querying Pastebin for owasp.org subdomains
Querying PassiveTotal for owasp.org subdomains
Querying Crtsh for owasp.org subdomains

Thanks.

sumgr0 commented 4 years ago

I've noticed the same...no output for a long duration after updating to 3.8.0 on my Debian 10 box downloaded from the releases page. Same experience on another Debian 10 box when installed via snap.

caffix commented 4 years ago

Thank you for the catch! I have found the issue and will release the fix shortly

rammerusaf commented 4 years ago

I ran the go get update command and when I run Amass with Enum it just hangs. Any advice?

caffix commented 4 years ago

@rammerusaf Please make sure you now have Amass v3.8.1, which contains the fix for the problem discussed in this issue