https://justice-reaper.github.io/posts/Insecure-Deserialization-Lab-6/
Exploiting PHP deserialization with a pre-built gadget chain - Justice-Reaper