https://pwnxpl0it.github.io/posts/Insecure-Deserialization/

Setup

Using docker:

$ docker build -t flaskapp . && docker run -p 5000:5000 -t flaskapp:latest

or you can just run it

$ flask --app app run --debug