2.0

Add payload Symfony/RCE5

1.9

Context menu bug fix.

1.8

Add payloads WordPress/PHPExcel (1-6)

Fix (lack of) encoding on payloads:

• Yii2 < 2.0.38 (CVE-2020-15148) (1)
• ZendFramework ? <= 1.12.20 (4)
• WordPress/P/WooCommerce <= 3.4.0 (2)

1.7

Add Yii2 RCE2 - a variant of Yii2 RCE1
More info here: https://blog.redteam-pentesting.de/2021/deserialization-gadget-chain/

1.6

Updated affected versions for Monolog payloads
Add CVE identification for Yii2 RCE2
CodeIgniter4 smaller payload

1.5

Fixed payload typos and errors
Added new PHPGCC POP Chains

• WordPress/WooCommerce/RCE2
• ZendFramework/RCE4
• Yii2/RCE1
• Laravel/RCE7

1.4

Fix extension unloading

1.3

Fix extension unloading

Threads not exiting after extension unloading on the Extender Tab
"Any extensions that start background threads or open system resources (such as files or database connections) should register a listener and terminate threads / close resources when the extension is unloaded."
REF: https://portswigger.net/burp/extender/api/burp/IExtensionStateListener.html

1.2

New Build

Added new PHPGCC POP Chains
Fixed payload typos and errors
Fixed hard coded use of HTTPS