Point it at a site or an entire domain, such as .edu, and it generates a list of e-mails, log-in screens, database errors and sourcecode, all of which are classic ways to gain entry onto a server.
They have lost their sourcecode, leaked an upcoming redesign, had to restore data on at least one server, and have to sweep for any shells the attackers may have left behind.