califio avatar

php-unserialize-audit

Audit PHP engine deserialization surface (unserialize, session decoders, WDDX, phar metadata, custom ce->unserialize handlers) for UAF, type confusion, partial-object __destruct, signed-length heap overflow, and parse inconsistency.

version
0.1.0
GitHub stars
85

Install

/plugin install php-unserialize-audit@califio

Run it inside Claude Code after adding the marketplace with /plugin marketplace add califio/skills.

Sponsors

Details

Marketplace
califio/skills
Source
plugins/php-unserialize-audit
Author
Calif.io
Category
Community