amass-intel
Collect open source intel on an organization like root domains and ASNs. tldr-pages
On several platforms
Several platforms
Find root domains in an IP [addr]ess range
amass intel -addr 192.168.0.1-254IdentifyUse active recon methods
amass intel -active -addr 192.168.0.1-254IdentifyFind root domains related to a domain
amass intel -whois -d domain_nameIdentifyFind ASNs belonging to an organization
amass intel -org organization_nameIdentifyFind root domains belonging to a given Autonomous System Number
amass intel -asn asnIdentifySave results to a text file
amass intel -o output_file -whois -d domain_nameIdentifyList all available data sources
amass intel -listIdentify