CLI Reference
The Amass CLI provides specialized subcommands for asset discovery, analysis, and visualization.
Command Structure
amass [subcommand] [options]
Available Subcommands
| Subcommand |
Purpose |
enum |
Perform automated asset discovery |
engine |
Run the collection engine service |
subs |
Extract and present subdomain data |
assoc |
Analyze asset associations |
track |
Identify newly discovered assets |
viz |
Generate graph visualizations |
Global Options
| Flag |
Description |
-h, --help |
Display usage information |
--version |
Print version number |
Quick Examples
Basic Enumeration
# Single domain
amass enum -d example.com
# Multiple domains
amass enum -d example.com,example.org
# From file
amass enum -df domains.txt
Active vs Passive
# Passive only (no direct contact with target)
amass enum -passive -d example.com
# Active with brute forcing
amass enum -active -brute -d example.com
Output Control
# Save to file
amass enum -d example.com -o results.txt
# All output formats
amass enum -d example.com -oA results
DNS Configuration
# Custom resolvers
amass enum -d example.com -r 8.8.8.8,1.1.1.1
# Rate limiting
amass enum -d example.com -dns-qps 200
Configuration Priority
Settings are applied in this order (highest to lowest priority):
- Command-line arguments - Override everything
- Environment variables - Override config files
- Configuration files - Default settings
flowchart LR
CLI[Command Line<br/>Highest] --> ENV[Environment<br/>Variables]
ENV --> FILE[Config Files<br/>Lowest]
FILE --> FINAL[Final Config]
Common Workflows
Reconnaissance Workflow
# 1. Start the engine
amass engine &
# 2. Run enumeration
amass enum -d target.com -active -brute -o enum.txt
# 3. Analyze subdomains
amass subs -d target.com -ip -o subs.txt
# 4. Generate visualization
amass viz -d3 -d target.com -o /output
Continuous Monitoring
# Track changes over time
amass track -d target.com -since "2024-01-01"
# Compare with previous runs
amass track -d target.com
Exit Codes
| Code |
Meaning |
| 0 |
Success |
| 1 |
General error |
| 2 |
Invalid arguments |
Environment Variables
| Variable |
Description |
AMASS_CONFIG |
Path to configuration file |
AMASS_DIR |
Data directory path |
See Also