BurpSuite的功能已经非常强大，这个插件产生的缘由是在一些场景下需要静默的去收集信息分析攻击面，便产生了这个插件，目标是不主动发送除正常请求外的任何一个请求包。它不会准确的发现并验证漏洞，但是会极大的辅助你挖掘漏洞。

Hello, Attack Surface Scan The Real Passive Scan, It's like a submarine.

1. API、SubDomain or other information found for JavaScript file.
2. AccessKey/SecretKey found for JavaScript file.
3. Dom Vulnerability Insertion point found for JavaScript file.
4. Broken Authentication Insertion point found for API.
5. Sensitive Data expose point found for API.
6. XXE or SSRF Insertion point found for API.
7. Website's fingerprint found for requests.
8. Not to stay up ...

插件采用插件化的架构，可以方便的进行新增功能。

Enjoy your hacking life.