synacktiv/thats_no_pipe

An API hooking framework for intercepting and monitoring Windows applications

Lightweight .NET Standard 2.0 library for method calls over named pipes for IPC. Supports two-way communication with callbacks.

Windows Filtering Platform Explorer

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

IPC [inter-process communication] engine for .NET based on memory-mapped files and on Named Pipes for Windows and Linux.

Proof of Concept for Process Code Injection Without Using WriteProcessMemory

Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the network using named pipes, and taking over highly privileged users PowerShell named pipes.

A Windows packet filtering library that enables low-level network packet interception, inspection, and modification. Ideal for building custom firewalls, VPN solutions, intrusion detection systems, and traffic analysis tools.

Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.