https://justice-reaper.github.io/posts/Insecure-Deserialization-Lab-4/
Arbitrary object injection in PHP - Justice-Reaper