owasp-amass / amass

In-depth attack surface mapping and asset discovery
https://owasp.org/www-project-amass/
Other
11.79k stars 1.86k forks source link

Feature Request: Supporting data gathering post subdomain processing. #456

Closed JeffreyShran closed 3 years ago

JeffreyShran commented 4 years ago

I would like to formalise a discussion in the discord server which began on the 10th August into a feature request.

The idea stems from the idea that most users will process their subdomains with Amass and then go on to run tools like:

Supporting evidence for this can be found in Jason Hadix's most recent bug hunters methodology, skimming through this will also give you a good idea of how Amass is used in a professionals workflow.

During our brief chat on Discord @caffix suggested it wise to not try and emulate the excellent work already completed by these projects but that we utilise the Lua scripting available in Amass to allow us to consume their outputs instead. I think this is a sensible approach.

I envisage this working thusly:

  1. We decide what outputs from these tools are desirable. I have initially proposed that we store associated URLs (which would also cover JS links as they are URLs themselves after all) and open ports.
  2. Then storage tables in the database need to be created. (Do we want to be able to track new items like Amass does for subdomains?)
  3. If the scripting engine cannot currently run post processing scripts then that needs to be created.
  4. Documentation created showing how to map the data from the tools into the pre-built database fields using the Lua scripting engine.
caffix commented 3 years ago

You wish to import findings from other tools into the Amass graph database?

JeffreyShran commented 3 years ago

no longer required due to Amass updates since. Thanks.