https://cybertoolchain.io/tools/sickle-pdk New releases and features in sickle-pdk, tracked by The Cyber Toolchain. en Mon, 13 Oct 2025 14:03:06 GMT https://github.com/wetw0rk/sickle-pdk/releases/tag/v4.0.0 https://github.com/wetw0rk/sickle-pdk/releases/tag/v4.0.0 Mon, 13 Oct 2025 14:03:06 GMT Sickle v4 adds new Windows shellcode stubs, a built-in handler module, and EXITFUNC support for staged payloads. • Adds built-in handler module for staged payloads, replacing the Netcat workflow for second-stage stub delivery. • New shellcode stub: `windows/aarch64/shell_reverse_tcp` — reverse shell for Windows on ARM64. • New shellcode stub: `windows/x64/egghunter` — egg-hunter technique for x64 Windows. • New shellcode stub: `windows/x64/virtualalloc_exec_tcp` — VirtualAlloc-based exec over TCP for x64 Windows. • New shellcode stub: `windows/x64/virtualalloc_exec_https` — VirtualAlloc-based exec over HTTPS for x64 Windows. • New shellcode stub: `windows/x64/reflective_pe_loader` — reflective PE loader for x64 Windows. • Adds EXITFUNC support to select payloads for controlled shellcode exit behavior. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sickle-pdk https://github.com/wetw0rk/sickle-pdk/releases/tag/v4.0.0-Beta https://github.com/wetw0rk/sickle-pdk/releases/tag/v4.0.0-Beta Wed, 13 Aug 2025 23:27:09 GMT sickle-pdk v4.0.0-Beta adds four new shellcode stubs including an x64 reflective PE loader and AArch64 reverse shell. • Adds `windows/aarch64/shell_reverse_tcp` shellcode stub for Windows AArch64 targets. • Adds `windows/x64/egghunter` shellcode stub for x64 egg-hunting payloads. • Adds `windows/x64/virtualalloc_exec_tcp` shellcode stub for x64 VirtualAlloc-based execution over TCP. • Adds `windows/x64/reflective_pe_loader` shellcode stub for in-memory reflective PE loading on x64. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sickle-pdk https://github.com/wetw0rk/sickle-pdk/releases/tag/v3.1.0 https://github.com/wetw0rk/sickle-pdk/releases/tag/v3.1.0 Tue, 17 Dec 2024 06:02:02 GMT Sickle v3.1.0 adds 9 new shellcode stubs across Windows/Linux/ARM64 and an interactive ASM shell module. • Adds `windows/x64/kernel_token_stealer` shellcode stub for Windows x64 kernel token stealing. • Adds `windows/x64/kernel_sysret` shellcode stub for Windows x64 SYSRET-based exploitation. • Adds `windows/x64/kernel_ace_edit` shellcode stub for Windows x64 kernel ACE manipulation. • Adds `windows/x64/shell_reverse_tcp` shellcode stub for Windows x64 reverse TCP shells. • Adds `windows/x86/kernel_token_stealer` shellcode stub for Windows x86 kernel token stealing. • Adds `linux/aarch64/memfd_reflective_elf_tcp` shellcode stub for reflective ELF loading over TCP on Linux AArch64. • Adds `linux/aarch64/shell_reverse_tcp` shellcode stub for Linux AArch64 reverse TCP shells. • Adds `linux/x64/memfd_reflective_elf_tcp` shellcode stub for reflective ELF loading over TCP on Linux x64. • Adds `linux/x86/shell_reverse_tcp` shellcode stub for Linux x86 reverse TCP shells. • Adds `asm_shell` module for interactive opcode generation directly from ASM instructions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sickle-pdk https://github.com/wetw0rk/sickle-pdk/releases/tag/v2.0.2 https://github.com/wetw0rk/sickle-pdk/releases/tag/v2.0.2 Wed, 14 Aug 2024 00:57:41 GMT sickle-pdk v2.0.2 adds Windows registry key support and detects all bad characters from a single input flag. • Supports specifying all bad characters on a single input argument (e.g. `-b"\x00\x0a\x0d"`) instead of requiring separate passes. • Adds a Windows registry key entry for easier invocation on Windows hosts. • Re-focuses supported architecture targets to x86, x64, and ARM. Breaking changes: • The `Sickle` subdirectory has been renamed to `sickle` (lowercase), which may break paths, scripts, or imports that reference the old casing. • module() classes have been renamed to FormatModule() classes, which will break any custom modules or plugins that subclass or reference the old class name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sickle-pdk