ambionics/phpggc

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3876 stars · 557 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

PHPGGC is a library of PHP unserialize() payloads (gadget chains) with a command-line tool to generate them, covering frameworks like Laravel, Symfony, WordPress, and Magento. It is the PHP equivalent of ysoserial, used for exploiting insecure deserialization vulnerabilities.

Use cases

• generate php unserialize payloads for penetration testing
• exploit insecure deserialization in php applications
• find gadget chains for laravel or symfony
• generate rce payloads for ctf challenges
• test php applications for deserialization vulnerabilities
• generate deserialization payloads programmatically from php

When to choose

• you need ready-made gadget chains for popular PHP frameworks
• you are doing authorized penetration testing or CTF challenges involving PHP deserialization
• you want a ysoserial-like tool for PHP

When to avoid

• you need deserialization exploits for languages other than PHP
• you want a defensive scanning tool rather than payload generation
• your use case is not authorized security testing

Facets

cli-tool · maturity active

security penetration-testing cli serialization security penetration-testing developer-tools cli php windows deserialization gadget-chains exploit-generation php-unserialize offensive-security ysoserial-equivalent linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ambionics/phpggc")