search

owasp-amass / amass

In-depth attack surface mapping and asset discovery
https://owasp.org/www-project-amass/
Other
11.99k stars 1.88k forks source link

[Question] Bruteforcing subdomains with dictionary #502

Closed RaduNico closed 4 years ago

RaduNico commented 4 years ago

Hello!

I am currently trying to get subdomains for a given domain (example.com) by using a list of possible subdomain names. However the main issue is that amass does not seem to use the provided dictionary.

The subdomain api.example.com exists and my file test.txt contains only one line with the word 'api'. However when running the command below the subdomain is not listed:

amass enum -ip -src -brute -w test.txt -o test_amass -d example.com

Am I misusing amass or is this a bug?

My amass version is v3.10.5.

Edit: Amass is returning some subdomains for example.com, none of them is from the wordlist.

RaduNico commented 4 years ago

Read the description better, will ask on discord.