shell finder

<html>
<head>
<title>Portal C0DE</title>
<link rel="SHORTCUT ICON" href="favicon.png" type="image/png">
<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
<meta name="keywords" content="No Code No life"/>
<meta name="description" content="No Code No life">
<meta name="author" content="No Code No life">
<meta name='rating' content='general' />
<meta name='geo.country' content='id' />
<meta name='geo.placename' content='Indonesia' />
<meta name='robots' content='all'/>
<meta name='robots' content='index, follow' />
<meta name='robots schedule' content='auto'/>
<meta name='revisit-after' content='1 days' />
<meta name='googlebot' content='index,follow'/>
<meta name='distribution' content='global'/>
<meta contact='koruptor.gov@gmail.com'/>
<link rel="stylesheet" href='https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css'>
<style>
@import url('https://fonts.googleapis.com/css?family=Permanent+Marker|Nova+Square|Supermercado+One|VT323');
body	{
	background-color: #2C3A49;
	background-repeat: no-repeat;
	background-position: center;
	background-size: 100% 100%;
    background-attachment: fixed;
	color: white;
	text-align: center;
	font-size: 10pt;
	font-family: 'Supermercado One', cursive;
	letter-spacing: 2px;
	line-height: 25px;
}
h1		{
	font-family: 'VT323', cursive;
}
.header	{
	padding-top: 10%;
	font-size: 56pt;
}
.content{
	font-size:16pt;
}
.footerholder {
    background: none repeat scroll 0 0 transparent;
    bottom: 0;
    position: fixed;
    text-align: right;
    width: 100%;
    font-family: 'Nova Square', cursive;
}

.footer {
    background: none repeat scroll 0 0 transparent;
    margin: auto;
    font-family: 'Nova Square', cursive;
    width: 90%;
}
a {
	color:#ffffff;
	text-decoration:blink;
	transition:all .30s ease-in-out;
}

a:hover{
	color:#2980B9;
}
.blinking-cursor {
	font-weight: 100;
	font-size: 20px;
	color: white;
	font-family: 'VT323', monospace;
	-webkit-animation: 1s blink step-end infinite;
	-moz-animation: 1s blink step-end infinite;
	-ms-animation: 1s blink step-end infinite;
	-o-animation: 1s blink step-end infinite;
	animation: 1s blink step-end infinite;
}

@keyframes 'blink' {
	from, to {
		color: transparent;
	}
	50% {
		color: white;
	}
}

@-moz-keyframes blink {
	from, to {
		color: transparent;
	}
	50% {
		color: white;
	}
}

@-webkit-keyframes 'blink' {
	from, to {
		color: transparent;
	}
	50% {
		color: white;
	}
}

@-ms-keyframes 'blink' {
	from, to {
		color: transparent;
	}
	50% {
		color: white;
	}
}

@-o-keyframes 'blink' {
	from, to {
		color: transparent;
	}
	50% {
		color: white;
	}
}
</style>
</head>
<div class='header'>
<center><h2>Shell Finder</h2>
<form action="" method="post">
<input type="text" size="50" name="traget" value="http://www.site.com/"/>
<br>
<br>
<input name="scan" value="Start Scaning"  style="width: 215px;" type="submit">
</form><span style="color:red">
<?php
if (isset($_POST["scan"])) {
$url = $_POST['traget'];
echo "</br><span class='start'></br>Scanning </br></br></br>".$url."</br></br></span>";
echo "</br><h4>Result :</h4></br>";
$shells = array("WSO.php","idx.php","indo.php","xai.php","noname.php","images/indo.php","images/ind.php","images/noname.php","wp-content/uploads/plugins/xaisyndicate/xaishell.php","wp-content/plugins/asu/ea.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","chonx.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
foreach ($shells as $shell){
$headers = get_headers("$url$shell"); //
if (eregi('200', $headers[0])) {
echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done </span></br></br></br>"; //
$dz = fopen('shells.txt', 'a+');
$suck = "$url$shell";
fwrite($dz, $suck."\n");
}
}
echo "<h4>Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span></br></h4>";
    }
    ?>
</div>
<div class='content'>
<i class="fa fa-facebook-square" aria-hidden="true"></i>&nbsp;<a href='https://www.facebook.com/TatsumiCrew/' target='_blank'>Facebook</a>
</div>
Copyright <i class="fa fa-copyright" aria-hidden="true"></i> Arvan Apriyana | Ganda Tatsumi
</div>
</div>
</html>