Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Using OWASP Amass with Netlas Module

netlas.io | blog | #asm | #recon | #integration | #netlas | #amass | #subdomain

Summary

How to install OWASP Amass and configure its Netlas module: add a Netlas API key to datasources.yaml to fold Netlas subdomain discovery into recon; covers three installation methods.
Published
Collected

original ↗

Related coverage

blog · netlas.io
Using Uncover with Netlas.io module
How to install ProjectDiscovery's Uncover and use its built-in Netlas module: the tag system reaches IoT, security systems, business monitoring and live webcams for perimeter building.
blog · netlas.io
Discovering Data Exposure with Netlas
How to find exposed configs, API keys, database credentials, bearer tokens and debug outputs at scale using Netlas response data — mapped to OWASP Top 10:2025 exposure categories.
blog · netlas.io
Using Maltego with Netlas Module
Instructions for using the Netlas module in Maltego: plugin installation, supported transforms, API key setup, Community Edition result limits, and how transforms count against monthly quotas.
blog · netlas.io
Plug & Pwn: Mapping the Windows PnP Auto-Install Attack Surface
Netlas maps Windows PnP auto-install from DEF CON's Plug & Pwn: the OS fetches and runs vendor packages as SYSTEM; the remote variant rides authenticated RDP, so exposure can be scoped from outside.
blog · netlas.io
Telegram Bot API Abuse
Threat actors abuse Telegram's Bot API as a covert channel for phishing, telemetry and malware delivery; Netlas hunts surface Xeno lures and fake Adobe updates with stable detection anchors.
blog · netlas.io
How we hunt C2 infrastructure at RST Cloud using Netlas
How RST Cloud hunts C2 infrastructure with Netlas: a seven-step loop from goals and samples to fingerprints (JARM, certificates, HTTP headers), scheduled searches and multi-criteria validation.
back