Named Pipes

  1. Find named pipes:

[System.IO.Directory]::GetFiles("\\.\pipe\")

  1. Check named pipes DACL:

pipesec.exe <named_pipe>

  1. Reverse engineering software

  2. Send data throught the named pipe:

program.exe >\\.\pipe\StdOutPipe 2>\\.\pipe\StdErrPipe

PreviousKernel ExploitationNextVulnerable Drivers

Last updated