Sickle PDK

Sickle is a payload development kit originally created to aid in crafting shellcode, however it can be used in crafting payloads for other exploit types as well (non-binary). Although the current modules are mostly aimed towards assembly this tool is not limited to shellcode.

It is useful for security researchers and penetration testers developing custom payloads for exploits. The tool provides a framework with various modules to generate, manipulate, and format payloads while avoiding bad characters and supporting different architectures.

Sickle integrates with disassembly and assembly engines like capstone and keystone for handling shellcode operations.

Sickle operates by reading shellcode or binary input, applying development modules for payload crafting, and outputting in specified formats. It uses architecture-specific disassembly and assembly via dependencies like python3-capstone and python3-keystone-engine. Options allow filtering bad characters, variable naming, and listing formats or modules.