LT - OWASP AMASS

I presented about OWASP AMASS at OWASP Sendai Day 2020 as Lightning Talks.

Transcript

1. OWASP AMASS Akitsugu Ito（@springmoon6）
3. Requirement Design Develop Testing Implement Operation ① Requirement OWASP Top 10 Project ② Design Development OWASP Cheat Sheet Series OWASP Application Security Verification Standard (ASVS) OWASP Security Shepherd OWASP Security Knowledge Framework ③ Testing OWASP Zed Attack Proxy OWASP Juice Shop OWASP Web Security Testing Guide OWASP Mobile Security Testing Guide ④ Implement Operation OWASP ModSecurity Core Rule Set OWASP APPSensor OWASP CSRFGuard OWASP Dependency Check OWASP Dependency Track
4. Requirement Design Develop Testing Implement Operation ① Requirement OWASP Top 10 Project ② Design Development OWASP Cheat Sheet Series OWASP Application Security Verification Standard (ASVS) OWASP Security Shepherd OWASP Security Knowledge Framework ③ Testing OWASP Zed Attack Proxy OWASP Juice Shop OWASP Web Security Testing Guide OWASP Mobile Security Testing Guide ④ Implement Operation OWASP ModSecurity Core Rule Set OWASP APPSensor OWASP CSRFGuard OWASP Dependency Check OWASP Amass OWASP Dependency Track
5. What is Amass? • In-depth DNS Enumeration, Attack Surface Mapping and External Asset Discovery. • DNS enumeration and network mapping to aid in understanding an organization’s attack surface on the Internet https://owasp.org/www-project-amass/
6. How to install • Docker • Security OS
7. Results
8. Visualization https://github.com/OWASP/Amass/blob/master/doc/user_guide.md