I wrote a PHP vulnerability scanner once. It was pretty simple:

if (isPHP)

  echo "VULNERABLE!"