loading
Loading content
loading
Network
Quickly map an organization's network ranges using ASN information.
overview
asnmap answers a scoping question that DNS alone cannot: which IP ranges does this organization own? Give it an org name, an ASN, a domain, or a single IP and it resolves the associated autonomous system and prints the CIDR ranges behind it, turning a fuzzy target into concrete address space.
Those ranges are the seed for everything downstream. Once you know the CIDRs, you can expand them to hosts, port-scan them, and probe the services that answer, so a single company name becomes a full list of in-scope assets. Output as plain ranges, CSV, or JSON to feed the next node cleanly.
On Trickest, asnmap is a Network node that takes a target identifier or a file of them and writes a file and a folder of ranges. It sits at the front of an infrastructure-mapping workflow, ahead of CIDR expansion and scanning.
use cases
Look up a company by name or ASN to get every CIDR it owns, then treat those ranges as the in-scope boundary for the rest of the engagement.
Resolve a domain to its ASN and ranges to find the broader infrastructure behind a single site, including siblings that share the same address space.
Emit JSON ranges and hand them to a CIDR expander and a port scanner so probing runs against owned IP space, not only published hostnames.
Pass a file of organizations, ASNs, or domains to map many footprints in one run and write the combined ranges for downstream nodes.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| org | STRING | -org | Target organization to look up (e.g. EXAMPLE). |
| asn | STRING | -asn | Target ASN to look up (e.g. AS64500). |
| domain | STRING | -domain | Target domain to look up (e.g. example.com). |
| ip | STRING | -ip | Target IP to look up (e.g. 198.51.100.10). |
| file | FILE | -file | File of targets to look up in bulk. |
| json | BOOLEAN | -json | Display output in JSON format. |
| csv | BOOLEAN | -csv | Display output in CSV format. |
| v6 | BOOLEAN | -v6 | Include IPv6 CIDR ranges in the output. |
Showing key inputs. asnmap exposes 15 inputs in total.
| Name | Type | Flag | Description |
|---|---|---|---|
| org | STRING | -org | target organization to look up (e.g. EXAMPLE) |
| asn | STRING | -asn | target ASN to look up (e.g. AS64500) |
| domain | STRING | -domain | target domain to look up (e.g. example.com) |
| ip | STRING | -ip | target IP to look up (e.g. 198.51.100.10) |
| file | FILE | -file | file of targets to look up in bulk |
| json | BOOLEAN | -json | display output in JSON format |
| csv | BOOLEAN | -csv | display output in CSV format |
| v6 | BOOLEAN | -v6 | display IPv6 CIDR ranges in the output |
| silent | BOOLEAN | -silent | display silent output, ranges only with no banner |
| verbose | BOOLEAN | -verbose | display verbose output |
| proxy | STRING | -proxy | list of proxies to use (comma separated) |
| proxy-file | FILE | -proxy | file containing a list of proxies to use |
| resolvers | FILE | -resolvers | file with a list of resolvers to use |
| config | FILE | -config | asnmap configuration file |
| disable-update-check | BOOLEAN | -disable-update-check | disable the automatic asnmap update check |
example
# map every CIDR range an organization ownsasnmap -org EXAMPLE -silent192.0.2.0/25192.0.2.128/25198.51.100.0/25198.51.100.128/25203.0.113.0/25203.0.113.128/26203.0.113.192/26guidance
Use asnmap to turn a company, ASN, domain, or IP into the CIDR ranges it owns, at the start of an infrastructure map. It finds ranges, it does not scan them, so follow it with a CIDR expander and a port scanner like naabu.
Expands and slices CIDR ranges. Run it after asnmap to turn ranges into host lists.
Broader org intelligence including ASNs from passive OSINT. asnmap is the fast, focused ASN lookup.
Pulls prefixes for an ASN. A lighter sibling when you already have the AS number.
faq
related
Maximize your resolver count by combining the target's DNS servers with public resolvers.
Expand CIDR ranges into a list of IP addresses easily.
Expand CIDR ranges into a list of IP addresses easily, from a file.
Maintain a list of IPv4 DNS servers verified against baseline servers for accurate responses.
Patched dnsvalidator that keeps only IPv4 resolvers verified against baseline servers.
A simple Node.js network scanner.
An organization name feeds asnmap, which maps its CIDR ranges and passes them to mapcidr, expanding them into a host-range output for scanning.
Facts on this page come from the live Trickest tool library.