Python - https://dan.lousqui.fr/explaining-and-exploiting-deserialization-vulnerability-with-python-en.html

Java - https://diablohorn.com/2017/09/09/understanding-practicing-java-deserialization-exploits/