Secopey | Search vulnerability

<!DOCTYPE html>
<html>
<head>
        <title>Secopey | Search vulnerability</title>
        <style type="text/css">
        body{
                color: #3EF403;
                background-color: black;
        }
        input {
    border: dashed 1px;
    border-color: #333;
    BACKGROUND-COLOR: Black;
    font: 8pt Verdana;
    color: #0CFF37;
        }

        select {
    border: dashed 1px;
    border-color: #333;
    BACKGROUND-COLOR: Black;
    font: 8pt Verdana;
    color: #0CFF37;
}
        </style>
</head>
<body>
<pre style="text-align: center">

  ______ ____   ____  ____ ______   ____ ___.__.
 /  ___// __ \_/ ___\/  _ \\____ \_/ __ <   |  |
 \___ \\  ___/\  \__(  <_> )  |_> >  ___/\___  |
/____  >\___  >\___  >____/|   __/ \___  > ____|
     \/     \/     \/      |__|        \/\/

-[ search vulnerability | Shor7cut - Bug7sec Team ]-
<!-- search scope vulnerability -->
</pre>

<Center>
<form action="" method="post">
<input type="text" value="" name="url" placeholder="http://localhost/">
<select name="cms">
        <option value="1">Wordpress</option>
        <option value="2">Joomla</option>
</select>
<input type="submit" name="submit" value="Scan Now!"/>
</form>
<pre style="text-align: left;">
<?php
/*
Name    : Secopey | Search vulnerability
Date    : 29/03/2016 03:04 PM
Link    : http://facebook.com/bug7sec
Link    : http://pastebin.com/u/shor7cut
Author  : Shor7cut
*/
set_time_limit(0);
error_reporting(0);

class hun7ing
{
        function sRequesthc($url , $cms , $method , $page){
        if($method == "PAGE"){
        $curl = curl_init("https://www.exploit-db.com/search/?order_by=date&order=desc&pg=".$page."&action=search&description=".$cms."");
        //&platform=31
        }else{
        $curl = curl_init($url);
        }
        curl_setopt($curl, CURLOPT_USERAGENT, "msnbot/1.0 (+http://search.msn.com/msnbot.htm)");
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($curl, CURLOPT_TIMEOUT, 30);
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
        curl_setopt($curl, CURLOPT_COOKIEJAR, './temp/cookies.log');
        curl_setopt($curl, CURLOPT_COOKIEFILE, './temp/cookies.log');
        $data = curl_exec($curl);
        return $data;
        }

        function countPage($data){
                $re = "/&pg=(.*?)&/";
                preg_match_all($re, $data, $matches);
                $un = array_unique($matches[1]);
                return $un[10];
        }

        function unique($udat){
                return array_unique($udat);
        }

        function cms($shcid){
                switch ($shcid) {
                        case '1':
                                $shc_ = array(
                                        'Themes'  => '/wp-content\\/themes\\/(.*?)\\//' ,
                                        'Plugins' => '/wp-content\\/plugins\\/(.*?)\\//' ,
                                );
                        break;
                        case '2':
                                $shc_ = array(
                                        'Themes' => '/\\/templates\\/(.*?)\\//',
                                        'Modules' => '/\\/modules\\/(.*?)\\//',
                                        'Option' => '/.?option=(.*?)&/'
                                                );
                        break;

                        default:
                        break;

                }
                                        return $shc_;
        }

}



        if(isset($_POST['cms']) && isset($_POST['url']) && isset($_POST['submit'])){


        $url = $_POST['url'];
        $data = hun7ing::sRequesthc($url,'NULL','NULL','NULL');
        echo "[#]-| Site URL -> ".htmlentities($url)." <br>";
        foreach (hun7ing::cms($_POST['cms']) as $key => $value) {
                preg_match_all($value, $data, $wpThemesMatch);
                foreach (hun7ing::unique($wpThemesMatch[1]) as $key => $exco) {
                        $expdbs   = hun7ing::sRequesthc("https://www.exploit-db.com/search/?order_by=date&order=desc&pg=1&action=search&text={$exco}",'NULL','NULL','NULL');
                        $linkexp = "/https:\\/\\/www.exploit-db.com\\/exploits\\/(.*?)\\//";
                        preg_match_all($linkexp, $expdbs, $los);
                        if($los[0]){
                                echo "[+]-| Search Exploit -> $exco <br>";
                        foreach ($los[0] as $key => $link) {
                                echo "    |-[DB] $link <br>";
                        }

                        }else{
                                echo "[+]-| Search Exploit -> $exco <br>";
                        }
                        ob_flush(); flush();
}
}

        }


?>
</pre>
</Center>
</body>
</html>