Crystal

CrystalPotato is a privilege escalation tool designed for Windows, enabling users with `SeImpersonatePrivilege` to elevate their permissions to SYSTEM level. It leverages DCOM OXID Resolver and named pipe impersonation techniques, dynamically resolving Windows APIs and allowing for the execution of commands, reverse shells, or local admin user creation. Notable features include XOR-obfuscated strings, command output by default, and a compiled single-file executable with no dependencies.

miniss is a lightweight tool designed to display open listening sockets, serving as a minimal alternative to `ss` or `netstat`. Primarily aimed at penetration testers and CTF players, it offers a standalone static binary for environments where traditional socket tools might be absent, supporting both TCP and UDP protocols over IPv4 and IPv6. Notable features include customizable output options, socket type differentiation, and clear display of socket states along with associated user information.

SprayCannon is a multithreaded password spraying tool that automates the process of password spraying across various applications while maintaining a record of previously attempted credentials. Notable features include a backend database for tracking sprayed combinations, built-in delays and jitter for requests, support for multi-factor authentication (MFA) and lockout detection, as well as integration with webhooks for alerts. It aims to streamline the password spraying process for users managing large credential lists across multiple protocols.

gori is a versatile interception and analysis tool that acts as a capturing proxy for various protocols including HTTP/1.1, HTTP/2, WebSocket, gRPC, and SSE. Its primary use case is to capture, replay, fuzz, and scan HTTP flows, providing features like a searchable flow history, inline decoding of tokens, and integration with AI agents for automated engagement. Notable features include an intruder-style fuzzer, a command palette for efficient navigation, and a headless mode for scripting, making it suitable for both manual and automated testing scenarios.

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.