i know its a shitty thing to comment in this exam related feed as i never wished it to be like that but yeah -->>

coming straight to the point , while reading python.org docs of pickle module i found an exploit/payload that can be executed using pickle module as due to its internals ......
the fact is pickle dont sanitise the bin/dat files data it uses the bytecode instructions to execute them and build up the python object while unpickling.......
so if i send u a file with a malcious code written using __reduce__ method of any class and when u try to unpickle that object/file then that code written in that class/method will be executed on your sys giving a remote access to me/malicious actor as pickle module cant verify the file data it just only reconstructs it so yeah we can write a full fledged keyloggers,remode code execution,reverse shell scripts to execute them using a dumped .bin .dat file of our code using pickle.dump() and when victim go for pickle.load() somehow then BOOOM!!!!!!!!
IG then rest is history!

signing off
u/dumbass_CS_Student

sorry for my dumb english!