Skip to content
eye

GitHub Action

OWASP Amass Enum

1.0 Latest version

OWASP Amass Enum

eye

OWASP Amass Enum

In-depth Attack Surface Mapping and Asset Discovery

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: OWASP Amass Enum

              
  uses: fguisso/[email protected]
Learn more about this action in fguisso/amass-action

Choose a version

amass-action

In-depth Attack Surface Mapping and Asset Discovery for Github Actions

This Amass Action for recon orchestration using Github Actions.

WIP

At this star point, this action just execute the command:

amass -brute -d DOMAIN -o OUTPUT.txt

or

amass -passive -d DOMAIN -o OUTPUT.txt

Example

Running Amass with brute force in the owasp.org domain and upload the output in the Github Workflow Artifacts.

name: Amass Enum

on:
    workflow_dispatch:

jobs:
  amass-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-go@v2
        with:
          go-version: 1.17

      - name: Amass - Enumeration
        uses: fguisso/amass-action@main
        with:
          domains: owasp.org
          brute: true

      - name: GitHub Workflow artifacts
        uses: actions/upload-artifact@v2
        with:
          name: amass.txt
          path: amass.txt

Available Inputs

Key Description Required
domains Domain names separated by commas (can be used multiple times) true
passive Disable DNS resolution of names and dependent features fasle
brute Execute brute forcing after searches fasle
output Path to the text file containing terminal stdout/stderr (default: amass.txt) fasle