CrystalPotato — implementation of [GodPotato](https://github.com/BeichenDream/GodPotato) in the Crystal programming language

A tool for local privilege escalation from accounts with the `SeImpersonatePrivilege` privilege to `NT AUTHORITY\SYSTEM`.

Features:
• Use of the indirect syscalls technique.
• Dynamic API resolution.
• Compile-time XOR string obfuscation.
• A standalone executable that does not require additional components or a runtime environment to operate.

The main advantage of this implementation is its set of OPSEC improvements designed to reduce the binary’s signature surface. The drawback is that the `CrystalPotato` page lists testing on Windows 10, 11, and Server 2025, whereas `GodPotato` claims support for Windows 8–11 and Server 2012–2022.

Tool: [https://github.com/ricardojoserf/CrystalPotato](https://x.com/ipurple/status/2091829333052551545)

CrystalPotato is a Crystal-language implementation of GodPotato for local privilege escalation to SYSTEM. It uses indirect syscalls, dynamic API resolution, and XOR obfuscation, with OPSEC improvements but limited Windows support.

CrystalPotato — implementation of GodPotato in the Crystal programming language