SerialSnoop

SerialSnoop is a non-intrusive Windows serial port monitoring tool. It captures COM read/write operations of target processes through user-mode API Hook, without occupying the physical serial port.

Features

• Hooks CreateFile / ReadFile / WriteFile / CloseHandle, reports OPEN / CLOSE / RX / TX via named pipe
• Single entry point SerialSnoop.exe, automatically uses x64 / x86 injection sidecar based on target bitness
• Supports reverse lookup of the process occupying a COM port; multi-target concurrent monitoring
• HEX / ASCII / Both display modes and session export

Usage

1. Run SerialSnoop.exe as Administrator
2. Select the COM port or target process → click 「Start Monitoring」
3. Operate the target serial port to send/receive data and observe real-time monitoring
4. Export session logs when needed

Download

• Download
• Source Code

Pre-built binaries are available from the GitHub Releases page (self-contained single file, no .NET Runtime required). The package includes x64/x86 injection components — extract and run as Administrator.

License

This project is released under the GNU General Public License v3.0（GPL-3.0）.