PHPGGC
A library and tool to generate PHP unserialize() payloads for exploiting gadget chains in popular frameworks.
What is PHPGGC?
PHPGGC (PHP Generic Gadget Chains) is a security tool that provides a collection of pre-built exploit payloads targeting PHP's unserialize() function. It automates the generation of malicious serialized objects, enabling security researchers and penetration testers to efficiently test for and demonstrate deserialization vulnerabilities in PHP applications without manually crafting exploits.
Security researchers, penetration testers, and red teamers who need to identify and exploit PHP deserialization vulnerabilities in applications using frameworks like Laravel, Symfony, WordPress, or Drupal.
Developers choose PHPGGC over manual exploit crafting because it offers an extensive library of ready-to-use gadget chains for popular PHP frameworks, supports multiple exploit types (RCE, file operations), and includes features like PHAR payload generation and encoding obfuscation to bypass filters.
Overview
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Use Cases
Best For
- Testing PHP applications for deserialization vulnerabilities during security assessments.
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
