PHPGGC

phpggc Symfony/RCE1 system "<cmd>"

Tool for generating PHP deserialization payloads for various frameworks (Symfony, Laravel, etc.).

When you find a PHP application that deserializes untrusted data (e.g., in sessions, cookies, or parameters). PHPGGC generates serialized chains that, when deserialized, execute code or commands. It supports many popular gadgets.

If you don't know the exact framework or version, it's hard to hit the target. Also if the application has restrictions like `allowed_classes` or `unserialize_callback_func`.