OWASP Amass on Ubuntu 24.04 LTS by cloudimg

OWASP Amass on Ubuntu 24.04 LTS

OWASP Amass is the OWASP Foundation's flagship tool for attack-surface mapping and external asset discovery. Point it at a domain you own and it discovers the subdomains, DNS records, TLS certificates, netblocks and autonomous systems that make up your external attack surface, drawing on open-source intelligence from certificate-transparency logs, passive DNS, WHOIS/RDAP and 60+ data sources.

An attack-surface-mapping host, not a bare binary

This cloudimg appliance turns the scanner into a working attack-surface-mapping host:

• Pinned scanner - OWASP Amass 5.1.1, the upstream release binary verified against the published SHA256 checksums.
• Ready-to-use configuration - a system config at /etc/amass/config.yaml and an OSINT data-source template at /etc/amass/datasources.yaml. Certificate-transparency and several sources work with no API keys at all; add your keys to the template to unlock the full 60+ source set.
• Persistent asset database - findings are stored in an OWASP Open Asset Model (OAM) database at /var/lib/amass so results accumulate over time and are queryable with `amass subs`.
• Scheduled enumeration - a daily systemd timer passively enumerates the domains you configure in /etc/amass/scan.conf and writes text reports with stable `latest-<domain>` symlinks your CI or SIEM can always read.
• Provable on your own VM - a bounded self-test (`amass-selftest`) runs an enumeration end to end so you can prove the scanner works before you point it at your own domains.
• Passive by default - the default mode is passive OSINT collection, which sends no packets to your targets; switch to active mode with one edit when you want DNS resolution and light active recon. Certificate-transparency and a few sources work with no API keys; add your keys to /etc/amass/datasources.yaml to unlock the full set of more than sixty data sources.

Secure by default

Nothing listens on the network: SSH with your launch key is the only open port. The image ships no default credential of any kind, and unattended security upgrades are enabled. The OS is fully patched at capture. Only enumerate domains you are authorised to assess.

Support

Deployment guide: https://www.cloudimg.co.uk/guides/owasp-amass-on-ubuntu-24-04-azure/

24/7 support: support@cloudimg.co.uk

OWASP Amass is Apache-2.0 licensed, free software. Not affiliated with or endorsed by the OWASP Foundation.