Welcome back to our lab environment.
In the previous demo,
we saw how to enumerate the information about our target domain.
Now, in here, let's take a look on how to visualize the data that we collected.
First, we can check out the previous scans by using a database module.
For example,
let's run amass db to specify that we want to use the database
module, and then let's use ‑dir to specify the directory in which I
have the data saved, and then let's use ‑list to list out the
enumeration attempts that we've done.
Then take a look, we have here the two enumeration attempts that we had.
Let's take a look at the results of one of them. For that, I'll
use the same command, but instead of using list,
I'll use ‑enum and then the number of the enumeration attempts that I want.
After that,
I'll use the flag ‑show to indicate that I want to see all
of the results from that enumeration.
Perfect.
Take a look, we have here the results from our first scan, and
this can be really useful if you run multiple scans against the
same domain across a period of time.
For example, you can run this once a week and then
compare the results to see what is new.
Okay,
now, let me show you how we can create a cool graph with this data. For that,
I'll use the amass module called this from visualization.
I'll add to this command the ‑dir and the name of the directory
that I have the data saved, and then I'll use ‑d3 to specify that I
want to graph in the d3‑format. And once I run this, amass will
take all the data from the enumeration attempts, and then we
generate a graph for us.
Then all you have to do now is go to this directory using the File Explorer.
And in here, you see the globomantics folder.
Once you open it,
you see this HTML file, and this is where we have our report. Then
take a look, this is a really cool graph showing the domain and
everything that is associated to it.
In the center, in this red color, we have the domain that we enumerated.
Each circle is one piece of information associated to it.
For example,
those orange circles are the IP addresses associated with the domain.
Pretty cool, right?