creacitysec/CVE-2023-49103 ? reverse-engineered prompt

Build me a small Python tool that can take a text file full of URLs and quickly check which ones return phpinfo output. I want it to run through a lot of targets at once, show a live progress bar while it works, and save any matches to an output file so I can review them later.

For the check, make it handle the known bypass by appending /.css when it tries the URL, since just hitting the phpinfo page is not enough. Keep it simple and practical, with clear command line arguments for input and output files.

Please make it work with Python 3 and the usual requests libraries, and if you need to look up anything current online, go ahead. I only want this for testing my own systems in a safe, authorized environment.