Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/superhedgy/AttackSurfaceMapper
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
https://github.com/superhedgy/AttackSurfaceMapper
attack-surface attacksurfacemapper linkedin osint python reconnaissance subdomains
Last synced: about 2 months ago
JSON representation
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
- Host: GitHub
- URL: https://github.com/superhedgy/AttackSurfaceMapper
- Owner: superhedgy
- License: gpl-3.0
- Created: 2019-08-07T14:32:53.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-04-08T16:13:24.000Z (8 months ago)
- Last Synced: 2024-10-16T04:42:06.794Z (about 2 months ago)
- Topics: attack-surface, attacksurfacemapper, linkedin, osint, python, reconnaissance, subdomains
- Language: Python
- Homepage: https://AttackSurfaceMapper.com
- Size: 3.65 MB
- Stars: 1,312
- Watchers: 47
- Forks: 192
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - superhedgy/AttackSurfaceMapper - AttackSurfaceMapper is a tool that aims to automate the reconnaissance process. (Python)
README
# AttackSurfaceMapper
AttackSurfaceMapper (ASM) is a reconnaissance tool that uses a mixture of open source intelligence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find more targets. It enumerates subdomains with bruteforcing and passive lookups, Other IPs of the same network block owner, IPs that have multiple domain names pointing to them and so on.
Once the target list is fully expanded it performs passive reconnaissance on them, taking screenshots of websites, generating visual maps, looking up credentials in public breaches, passive port scanning with Shodan/Censys and scraping employees from LinkedIn.
## Demo
[](https://www.youtube.com/watch?v=buIQSf_gmdE)
## Setup
As this is a Python based tool, it should theoretically run on Linux, ChromeOS ([Developer Mode](https://www.chromium.org/chromium-os/developer-information-for-chrome-os-devices/generic)), macOS and Windows.
1. Download AttackSurfaceMapper
```sh
git clone https://github.com/superhedgy/AttackSurfaceMapper
cd AttackSurfaceMapper
```
2. Install Python3 dependencies
```sh
python3 -m pip install --no-cache-dir -r requirements.txt
```
3. Add optional API keys to enhance data gathering & analysis
Register and obtain an API key from:
- [VirusTotal](https://www.virustotal.com/gui/join-us)
- [Shodan.io](https://account.shodan.io/register)
- [Hunter.io](https://hunter.io/users/sign_up)
- ~~[WeLeakInfo](https://weleakinfo.com/register)~~
- [LinkedIn](https://www.linkedin.com/start/join)
- [GrayHatWarfare](https://buckets.grayhatwarfare.com/register)
- [Censys.io](https://search.censys.io/account)
Edit and enter the keys in keylist file
```sh
nano keylist.asm
```
## Usage
```sh
python3 asm.py -t your_site.com -ln -w resources/top100_sublist.txt -o demo_run
```
### Optional Parameters
Additional optional parameters can also be set to choose to include active reconnaissance modules in addition to the default passive modules.
```
|<------ AttackSurfaceMapper - Help Page ------>|
positional arguments:
targets Sets the path of the target IPs file.
optional arguments:
-h, --help show this help message and exit
-f FORMAT, --format FORMAT
Choose between CSV and TXT output file formats.
-o OUTPUT, --output OUTPUT
Sets the path of the output file.
-sc, --screen-capture
Capture a screen shot of any associated Web Applications.
-sth, --stealth Passive mode allows reconnaissance using OSINT techniques only.
-t TARGET, --target TARGET
Set a single target IP.
-V, --version Displays the current version.
-w WORDLIST, --wordlist WORDLIST
Specify a list of subdomains.
-sw SUBWORDLIST, --subwordlist SUBWORDLIST
Specify a list of child subdomains.
-e, --expand Expand the target list recursively.
-d, --debug Enables debugging information.
-v, --verbose Verbose output in the terminal window.
Authors: Andreas Georgiou (@superhedgy)
Jacob Wilkin (@greenwolf)
```
## Authors
- [Andreas Georgiou](https://twitter.com/superhedgy)
- [Jacob Wilkin](https://github.com/Greenwolf)
## Acknowledgments
- Thanks to [Aidan Holland](https://github.com/thehappydinoa) for adding the Censys module.