This adds a Python deserialization gadget that will exec arbitrary Python code in place. It is only compatible with Python 3.x due to differences in Python's exec function and statement between 2 and 3.
Spencer McIntyre