pipetap – a windows named pipe proxy tool

This report introduces pipetap, a Windows named pipe proxy and analysis tool that injects a support DLL (using Microsoft Detours) to hook pipe-related APIs and provides a fast ImGUI-based interface for intercepting, modifying, and exporting pipe traffic. It includes features such as multi-target management, pipe enumeration with ACL insights, an integrated pipe client (including a “remote client” mode to evade PID validation), a TCP-to-named-pipe proxy with a Python SDK, and JSON export for downstream processing, while noting caveats like potential latency-induced deadlocks and partial support for asynchronous pipes.