• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    PHP serialized object gadget chain in cookie to e-commerce web app (Zend/PHPGGC)

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    ills3c Intel&Coffee@Ills3C
    •updated yesterday•0•0•10

    Detects HTTP requests containing serialized PHP objects in the Cookie header matching patterns associated with Zend Framework or Laminas gadget chains, characteristic of PHP object deserialization exploitation (e.g., PHPGGC style).

    Suricata

    Tags

    TA0001 - Initial AccessT1190 - Exploit Public-Facing ApplicationExploit AttemptIDS IPS AlertHTTP RequestNetwork GenericLinuxWindowsSuricata IDSSnort IDSApache HTTP ServerNginx HTTP ServerHTTPWeb Application Attack

    Found in

    • Adversaries Abuse Cairn AI Tool for Automated AttacksLast updated yesterday

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?