All apps/Amass

Amass

amass

In-depth attack surface mapping and asset discovery.

Runs as amass|macOS, Linux, Windows|owasp.org

Command form

ai-draft · 2 tasks · 11 fields

Run amass enum for asset discovery. Data-source, wordlist-mask and resolver options are left out.

Opens the form; the finished command lands at your prompt, unrun
otty gui amass

amass enum

Enumerate a domain

Discover subdomains and assets for one or more root domains.

Enumerate a domainExample values, fixed in this page — nothing here reaches a terminal
Basic
Domains*
string
Output directory
directory
TasksEach one presets the form for one job
Passive enumeration
domainsdir
Active with brute force
domainsactivebrutewordlistdir
ParametersOnly these flags are editable in the form
Domains
Comma-separated root domains.
string
-d
Active techniques
Attempt zone transfers and certificate name grabs.
boolean
-active
Brute force subdomains
boolean
-brute
Brute-force wordlist
path
-w
Generate altered names
boolean
-alts
No recursive brute forcing
boolean
-norecursive
Timeout (minutes)
Minutes to run without progress before terminating.
integer
-timeout
Output directory
path
-dir
YAML config file
path
-config
Silent
boolean
-silent
Verbose
boolean
-v
SourcesEvery flag above is checked against these
source
-d value Domain names separated by commas (can be used multiple times) -active Attempt zone transfers and certificate name grabs -brute Execute brute forcing after searches -w value Path to a different wordlist file for brute forcing -alts Enable generation of altered names -norecursive Turn off recursive brute forcing -timeout int Minutes to run with…
help2026-10-27

github.com

Before it fills your prompt, Otty checks the installed amass against its version. A form that does not match your version is not offered.