phpggc

Generate payloads that exploit unsafe object deserialization

Matches ATT&CK tactic: Persistence ↗

Platforms: Linux · Last verified September 6, 2026

PHPGGC is a library of payloads exploiting unsafe object deserialization. It also provides a command-line tool to generate them.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Install on Kali Linux with `sudo apt install phpggc`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing