Simple workflow for the #OWASP Amass tool suite: https://github.com/OWASP/Amass
-
Google for the organization's ASN
-
$ amass.netdomains -asn ASN -p 80,443 > domains.txt
-
$ amass -v -ip -do data.json -df domains.txt
-
$ amass.viz -i data.json -d3 graph.html
-
Open graph.html