If you enjoyed the OWASP Amass tool, make sure to
check their official documentation.
There are several other features that you might like.
For example,
you can create custom DNS brute forcing rules so then you can
increase your chances of finding useful domains.
Also, you can integrate Amass with other tools, such as Maltego. In this way,
all your discovered domains are fed to your favorite red team tools.
Also, if you're interested in reconnaissance,
there are a few other recon courses here at
Pluralsight that I can recommend to you.
My two favorite ones are the Technical Information Gathering with
theHarvester and Reconnaissance with Sn1per. Both of them are really
useful for your red team engagements.
Also,
if you're wondering how you can protect your company
against those kind of recon attacks,
my best advice to you is to audit your own company using the Amass
tool and see what domains are available externally.
Once you have that information, you should then ensure that none of the
internal sensitive domains are exposed to the internet.
You can even work with your network team to ensure that people can only
reach servers that are intended to be externally available.
So that's it.
That's the end of our OWASP Amass course. I hope that now you have
one more useful tool in your cybersecurity toolbox.
So, thank you for watching, and I'll see you in the next course.