It's really incredible what it can do.

I once used it to demo a vulnerability on a client's website using NodeRed that I could trigger from my phone.

Basically I made NodeRed spit out a JS file which I enbedded on their site using the vulnerability and could trigger the content of the js from my phone

Felt so movie hacking-like. Website looked normal until I flipped a switch on my phone, now all images are replaced by kittens