Discover / Security
OWASP Amass
by OWASPGo
Network mapping and attack surface discovery tool for external asset reconnaissance.
Toolstable
Maturity: stable because 8y old, v5.1.1 released 118d ago. Derived from release and commit history, not a rating.
- Stars
- 15k
- Forks
- 2.2k
- Downloads / mo
- —
- Last commit
- 2026-07-19
- License
- NOASSERTION
- Open issues
- 234
Market and trust evidence
Edition not yet matchedNo exact skills.sh identity match is available for this repository. Repository adoption and freshness remain visible above; install momentum is not inferred.
Trust analysis is a screening signal, not a security warranty. Read the ranking and trust methodology.
In practice
Written by AI from this repository’s README · low confidenceAn organization does not know which external hosts and assets belong to it, so its attack surface is unmeasured.
Use it when
Use it when you need in depth attack surface mapping and asset discovery across DNS and related sources.
Not the right pick when
The README points installation and usage details to a separate docs repo, so this record alone will not get you running.
Capabilities
- network mapping of attack surfaces
- external asset discovery
- open source information gathering
- active reconnaissance techniques
- Docker image distribution
Cost: Free and open source
Video walkthroughs
Automated Web Recon with OWASP Amass
OWASP Amass: Expanding Data Horizons - Recon Village @DEF CON 32
Third-party YouTube uploads matched to this tool by title, channel and repository name on 2026-08-03. Not made, reviewed or endorsed by SkillPilot. View counts and publish months are as of the match date and the month is approximate. Nothing loads from YouTube until you press play.
What the repository ships
Has docsDocker imageCI configured
Detected from the actual files in the repository root.
Latest release v5.1.1
Published 2026-04-07
Uses the new Asset Database that includes schema changes impacting performance
Changelog
- c2a6afa66a317ae231f69810d1c4d6dc6d45e13e upgraded to Go version 1.26
- 706f0a3779ddcedc630585e562dbbdfde8ff5725 upgraded the asset-db package to v0.24.4
- 79299dce87b0085db0f2f4ef3e9c52cccb49f514 updated to v5.1.1
- 6fa86d997329c1c37bafcaf281f3ebafe2dddc23 updated the framework to the new asset db Repository interface
- 829ffeb6b78f0ab62ebf0c6afa82dd6556fe97ac updated copyright dates
- fb8bea8cec8ba8c4cd5edb4ea10a369d951b0506 updated HTTP probe transport
- bc08e3145637376b7538b2ca1df4f267aba8ff38 the new engine REST API server package
- 73a15f5e357e94142c2747951ca71a9561a72334 performance improvements
- bf7f495ad7e03c550bf8ad0a53b9d03bfae24d5a improvements to the location matching
- bdac2d768355482ea554ca00cb3d6273a483bae3 enhanced the dynamic scope expansion rules
- a72ffe4c2c0d1cdd2c10c5b1ff454fa2da36f775 dispatcher now has a durable backlog + bounded in-memory work queue
- cea0fa00313f0035b21e361a77963d1a2881ddec completed the first version of the engine REST API
Tags
README
OWASP Logo OWASP Amass Project
The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
Installation Go Version Docker Image GitHub Downloads
You can find additional installation instructions and documentation in the Amass Docs repo.
Corporate Supporters
Contributing Contribute Yes Chat on Discord
We are always happy to get new contributors on board! Please check CONTRIBUTING.md to learn how to
contribute to our codebase, and join our Discord Server to discuss current project goals.
Troubleshooting GitHub Test Status codecov Chat on Discord
If you need help with installation and/or usage of the tool, please join our Discord server where community members can best help you.
:stop_sign: Please avoid opening GitHub issues for support requests or questions!
Licensing License
This program is free software: you can redistribute it and/or modify it under the terms of the Apache license. OWASP Amass and any contributions are Copyright © by Jeff Foley 2017-2026. Some subcomponents have separate licenses.