If you do some research about PHP Object Injections, you´ll find a great number of articles with ideal exploiting conditions, but truth is a bit different. A scarcity of gadgets in the most famous projects makes serialization vulnerabilities unexploitable. However, the lack of gadgets is not the main problem, but that they have to be found. The mission is to link the dots so as to make vulnerability exploitable once again, to get used to the new conditions and get the greatest reward: RCE. This talk begins with a brief introduction that details the vulnerability arguments, to discuss current exploitation problems later. As a solution, an open source framework, called poiwer is presented. This provides the following features:Automatic exploitation linking gadgets (blind mode).Advice about well-known gadgets in third parties softwares.Detection and downloading of plugins in websites using WordPress.Magic methods extraxtion for analysis and gadgets custom elaboration.