Ravi Sir's Cyber Security Cards › Revision Cards
Amass: Subdomain Discovery
Amass: Subdomain Discovery Amass finds a domain’s subdomains (like dev.example.com), using public sources and, optionally, active guessing. Passive uses public data and is safe. Active brute force sends queries to the target, so it needs permission. Running active brute force on a public domain “for
Read card text
What this card says
What it is
Amass finds a domain’s subdomains (like dev.example.com), using public sources and, optionally, active guessing.
Passive vs active
Passive uses public data and is safe.
Active brute force sends queries to the target, so it needs permission.
Common mistake
Running active brute force on a public domain “for practice”. That is illegal.
Passive first; active only in scope or in your own lab.
Learn more in the lesson: 36.2 Amass: Subdomain Discovery