AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
AttackSurfaceMapper (ASM) is a reconnaissance tool that uses a mixture of open source intelligence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find more targets. It enumerates subdomains with bruteforcing and passive lookups, Other IPs of the same network block owner, IPs that have multiple domain names pointing to them and so on.
Once the target list is fully expanded it performs passive reconnaissance on them, taking screenshots of websites, generating visual maps, looking up credentials in public breaches, passive port scanning with Shodan/Censys and scraping employees from LinkedIn.
As this is a Python based tool, it should theoretically run on Linux, ChromeOS (Developer Mode), macOS and Windows.
git clone https://github.com/superhedgy/AttackSurfaceMapper
cd AttackSurfaceMapperpython3 -m pip install --no-cache-dir -r requirements.txtRegister and obtain an API key from:
Edit and enter the keys in keylist file
nano keylist.asmpython3 asm.py -t your_site.com -ln -w resources/top100_sublist.txt -o demo_runAdditional optional parameters can also be set to choose to include active reconnaissance modules in addition to the default passive modules.
…No open issues yet, or sync has not completed.