http://pages.dosil.es/posts/exploiting-python-pickle/
Exploiting Python Pickle