JCE Google Harvester

<?php
echo "
 _____            _ _      _     _
| ____|_ __   ___(_) | __ | |   (_)_ __  _   ___  __
|  _| | '_ \ / __| | |/ / | |   | | '_ \| | | \ \/ /
| |___| | | | (__| |   <  | |___| | | | | |_| |>  <
|_____|_| |_|\___|_|_|\_\ |_____|_|_| |_|\__,_/_/\_\

[*]-----------------------------------------------------------------------[*]
[+] Script Name          : Joomla JCE Dork Scanner
[+] Version              : 0.1
[+] Programed By         : G-B
[+] Made By              : Encik Linux
[+] Email                : [email protected] , [email protected]
[+] Use                  : php $_SERVER[PHP_SELF]
[+]
[+]                        Ini~ Semua!~ Poyo!
[+]
[+]-----------------------------------------------------------------------[+]
 |            Tidak Semua Vulnerable Site Vulnerable (:                    |
 |      Priv8 \!/ Priv8 \!/ Priv8 \!/ Priv8 \!/ Priv8 \!/ Priv8 \!/        |
[+]-----------------------------------------------------------------------[+]
";
$a = true;
while($a){
    echo "[*] Masukkan Dork  -> ";
    $ip = trim(fgets(STDIN,1024));
    if(!checkIP($ip)){
        echo "\n[~] IP Biar benor sikit noh.\n\n";
    }else{
        $a = false;
    }
}
echo "\n";
$fp = fopen('jce-results.txt','a+');
fwrite($fp,"[*]-----------------------------------------------------------------------[*]
 _____            _ _      _     _
| ____|_ __   ___(_) | __ | |   (_)_ __  _   ___  __
|  _| | '_ \ / __| | |/ / | |   | | '_ \| | | \ \/ /
| |___| | | | (__| |   <  | |___| | | | | |_| |>  <
|_____|_| |_|\___|_|_|\_\ |_____|_|_| |_|\__,_/_/\_\

[*]-----------------------------------------------------------------------[*]
[+] Script Name          : Joomla JCE Dork Scaner
[+] Version              : 0.1
[+] Programed By         : G-B
[+] Made By              : Encik Linux
[+] Email                : [email protected]
[+] Result For           : $ip
[*]-----------------------------------------------------------------------[*]

");
$dork = urlencode("$ip");
$pages = pages($dork);
$scanaed = array();
for($i=1;$i<=$pages;$i=$i+10){
    $src = send("http://www.bing.com/search?q=$dork&first=$i");
    preg_match_all('/<cite>(.*?)<strong>/',$src,$matches);
    $sites = $matches[1];
    foreach($sites as $site){
        $sitet = trim(str_replace('www.','',str_replace('/','',$site)));
        if(eregi('<',$sitet) || eregi('\?',$sitet)) continue;
        if(in_array($sitet,$scanaed)) continue;
            $scanaed[] = $sitet;
            echo "[~] check [ $site ] : ";
            $header = get_headers("http://$site/components/com_jce/");
            if(eregi('404',$header[0])){
                echo "No.\n";
            }else{
                echo "Yes.\n";
                fwrite($fp,"http://$site
");
            }
    }
}

fclose($fp);

function send($url,$post=false,$ref=false,$follow=false){
    $cookies = getcwd().'/cookies';
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3";
    $header[] = "Accept-Language: en-US,en;q=0.8 ";
    $header[] = "Pragma: ";
    $ch = curl_init();
    curl_setopt($ch,CURLOPT_URL,$url);
    curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,false);
    curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
    curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
    curl_setopt($ch,CURLOPT_COOKIEFILE,$cookies);
    curl_setopt($ch,CURLOPT_COOKIEJAR,$cookies);
    curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
    curl_setopt($ch,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; rv:17.0) Gecko/20100101 Firefox/17.0');
    if($post){
        curl_setopt($ch,CURLOPT_POST,true);
        curl_setopt($ch,CURLOPT_POSTFIELDS,$post);
    }
    if($follow) curl_setopt($ch,CURLOPT_FOLLOWLOCATION,true);
    if($ref) curl_setopt($ch,CURLOPT_REFERER,$ref);
    $return = curl_exec($ch);
    curl_close($ch);
    unlink($cookies);
    return $return;
}
function pages($dork){
    $src = send("http://www.bing.com/search?q=$dork&go=&qs=n&sk=&filt=all&first=199&FORM=PERE3");
    $ex = explode('<span class="sb_count" id="count">',$src);
    $ex = explode('-',$ex['1']);
    return $ex[0];
}
function checkIP( $ip )
{
    if( !empty( $ip ) && ip2long( $ip ) != 0 - 1 && ip2long( $ip ) != false )
    {
        $private_ips = array(
            array( "0.0.0.0", "2.255.255.255" ),
            array( "10.0.0.0", "10.255.255.255" ),
            array( "127.0.0.0", "127.255.255.255" ),
            array( "169.254.0.0", "169.254.255.255" ),
            array( "172.16.0.0", "172.31.255.255" ),
            array( "192.0.2.0", "192.0.2.255" ),
            array( "192.168.0.0", "192.168.255.255" ),
            array( "255.255.255.0", "255.255.255.255" )
        );
        foreach( $private_ips as $r )
        {
            $min = ip2long( $r[0] );
            $max = ip2long( $r[1] );
            if( $min <= ip2long( $ip ) && ip2long( $ip ) <= $max )
            {
                return false;
            }
        }
        return true;
    }
    return true;
}
?>