Pro-tip: You can star and watch this repository for upadtes to this :)

It has some basic features like it can retrieve

• Cookies
• Page URL (the page on which it was fired)
• System date and time (the date and time of victim machine)
• Page source
• Screenshot of page on which it was fired
• A unique ID to recognise it

Some advanced features (inbuilt) are:-

• Scan for HTTP ports running on the server hosting the vulnerable page
• Scan for additional paths (fuzzing the path) on the same web server URL and page source will be sent to the server for above features

You can also done some more interesting stuff with add-ons. Just uncomment the line as written in the README file of particular add-on. Currenly, you can use three add-ons:-

• All port scanner: Scan all 65536 ports of the host
• Login creator: Create a fake login page for phishing
• Wordlist fuzzer: Fuzz URL endpoint using a wordlist (URL)

More infomation can be found on README file

You can use Pipedream to create workflows. Information can be found here