Wow. Cool Idea. But I think this protocol would have security flaws as websites could theoretically carry out this protocol without the user's permission
@@thebelovedmoon you can't run elevated programs if you yourself aren't elevated, that's not the browser, that's the operating system, you can't go around it
@@falsehope4421 regardig 'http://' and 'https://'... These protocols are commonly used and are handled differently today. You'll most like find a handler that points to Internet Explorer, even though you have a different browser.
Remember! What he made is not really a "protocol" as such, but rather a handler for a custom protocol / URI Scheme like 'example://'.
You register the scheme, points to an application it should launch, and it'll call that application with the URI path as arguments.
How browsers handle such custom schemes could differ. But if they support the scheme, they'll have integrated actions... If not, they'll ask the operating system if there are any registered handlers for that scheme. If there is, it'll get the name of that handler and ask the user if he/she wants to launch that application.
@@falsehope4421 this is not something you upload to 'google' and such. This is a protocol handler for a custom URI scheme.
Creating such is quite normal for starting applications from a web page.
As an example, shortcuts for Steam games uses the custom URI Scheme 'steam://rungameid/*game-id*'
You can navigate to this in a browser as well and it'll ask you if you want to launch Steam. In this case 'steam://' is the "protocol", but it's only available if you have steam installed.
His protocol handler example can be harmful, but only on PC's that have installed and registered his handle.
Even though this is actually right, I think that, what Enderman did was merely a demonstration -hense he used a simple program he created to pipe the commands onto cmd
a good idea that enderman could add is a box that says "Are you Shure you want to execute the command Rd C:/? ONLY CLICK YES IF YOU UNDERSTAND THE COMMAND IT COULD BE A VIRUS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
@BENJAMIN LEBRON GONZALEZ I had a crypto miner once, and it was so new that when I manually scanned it in Windows Defender it would go "nothing wrong here" Also pushed it to Virustotal and it had a low detection rate in the beginning, and then after a week or so it was being detected as a virus lmao. Also the miner exe was created by a vbs script on startup which I had to manually find as that went unnoticed. I feel bad for not keeping that script. Maybe I could find it somewhere in my old drive if I didn't delete it.
@@honestlyidk2585 yeah sure, but there already exists plenty of ways for a virus to stay active all the time. This is one of them, but too high level to be practical IMO, lower level stuff like rootkits and startup scripts are just plain better
@@remty516 may sound stupid but you could change an existing key that is commonly used to run the commonly used app and a virus in the background obviously this isn't the most efficient way to do it tho
No one speaking of the fact you have to execute software first to install the key? Dumb kids will always get viruses (I know I did), and registering a protocol is not the easiest way to do it. There is nothing new here.
I could also think of one flaw where in one protocol (I'll use cmd:// for instance), it runs a program in an elevated state even though the browser doesn't...
the only turning point is how to exploit that flaw, I suppose
@@Endermanch However, in some browsers you only need to accept once and the browser can remember that some protocoll was accepted... And usually that means if e.g. cmd://winver was accepted and remembered, then the browser also won't ask again if the next url is somthing like "cmd://del /r C:/" (only the protocol is remembered, the "payload" is usually ignored)
@@HeidenLam thank you for caring enough to read the argument fucktard, the moment you saw my reply you could have stopped reading and just go watch the video
@@Daniel-cc6gs it was quite literally ironic "Oh look an original comment... SOMEONE COMMENTED SOMETHING LIKE THAT 3 MINUTES AGO, YOURE OBVIOUSLY A STEALER GO TO HELL " like its really fucking obvious the hell is wrong with you people
@@cidsx sure, whole pc thing is just about translation, synthesis thoughts on different elements. A good translator will get to that point sooner or later.
Paulo Constantino in youtube has advanced, has his own computer created by him and his own operating system and is public for connect and testit, sol-1.org
Making a Os isnt that hard (Depending on how good you are at programming.) you should learn x86. Most virtual machines let you run compiled x86. Its pretty fun to do. Edit: It takes a lot of time tho.
@@pentagonanimates file extensions aren't "made". I can have a ".wtf" file and make it work with my program. You can store jpegs in a .mp3 file, what matters is the content. The file extension is only used to let the OS know which program it should use to open that file
@@龗 Someone made an entire os in common lisp (look up mezzano OS). Trust me, you CAN make an OS in pure C and most of them are built with pure C, don't say random bullshit lol
@@cidsx Well, even if you start out with a baseline there's plenty of stuff to design. Graphical interfaces and driver support are 2 of the most major challenges
@@cidsx But the kernel part is a nightmare. Try preventing all the memory leaks and overflows and making sure it runs well on 1GiB RAM with only pure C.
@@killertigergaming6762 Linux is a kernel, GNU is the software in it. It has NO security software, but you can install "sudo" or "doas" to have password security, and there is "ClamAV" but it sucks tbh.
@@90hijacked do u have source for this beccause I use GNU/Linux and on my OS what he did in the video is generalized into a MIME Type and done with 1 file and 1 command
@@SomeNot I prefer doing it by slowly filling the heap in 8 byte increments, inside a "for(;;)" of course. Takes a while to realize something is wrong.
# Remove the 'py://' prefix if it exists
if url_encoded_string.startswith("py://"): # It assumes that you are using the py:// custom protocol
url_encoded_string = url_encoded_string[5:]
# Decode the URL-encoded string
decoded_string = urllib.parse.unquote(url_encoded_string)
# Log the decoded string
logging.debug(f"Decoded string: {decoded_string}")
# Remove any trailing slashes or whitespace characters
decoded_string = decoded_string.rstrip('/').strip()
# Log the cleaned decoded string
logging.debug(f"Cleaned decoded string: {decoded_string}")
# Execute the decoded string as Python code
try:
exec(decoded_string)
except Exception as e:
logging.error(f"Error executing code: {e}")
except Exception as e:
logging.error(f"Unexpected error: {e}")
if _name_ == "__main__":
logging.debug("Starting the script")
main()
# very simple to customize, just change a few things
Gotta give you some credit for writing a parser in proper C, I was expecting a batch script at most. Overall, this is a cool little project. Probably a great learning experience.
That sounds like a very usable idea for creating custom user shells via web design patterns, similar to ChromeOS. You can just strip Windows of all its graphic applications leaving only components necessary for browser, let the browser in and create some webpages to replace Control Panel and so on. Also you can create simple authorization in this interpreter app to ensure local scheme integrity (i. e. no one who already knows you have this feature will be able to open your apps from their site).
• You don't need the "@" entry in the key. • Instead of "%1", pass "%L" to accommodate long filenames. • If you use :// in the scheme, the system will append a trailing slash (cmd://blah → cmd://blah/). Just use cmd:foobar • It's easier to use a scripting language than C (but you have to compile it; you can't execute the script itself).
@@atikinbtw если ты про ненависть к России, то я думаю нет ничего такого, что бы высказать мнение о своей родине. Я знаю многих, кто ненавидит Россию, но у них есть разные причины, почему они все ещё в ней живут - финансовые, семейные, и т.п. Может он это написал, что бы его не ассоциировали с Россией, ведь он уже наверное устал отвечать на вопросы "say plz something in Russian"
@@user-vn7ce5ig1z I mean nobody would fiddle around such stuff and you have to, say, know plenty of stuff including how URI scheming works and how Windows handles them. That's why he's pretty smart to me. Also I'm not a child. I'm literally 18 years old and will turn 19 in a couple of days so your take about me being a child is also wrong.
Funny how people always seem to think that anyone who knows anything they don't is a genius, like a young child who knows nothing thinks another child just one grade above them is smart. ¬_¬
Here's how you'd pull this(URL Parser) off in Python: from urllib.parse import unquote, urlsplit from sys import argv from os import system
# argv[1] is the first arg, argv[0] is filename passed_url = argv[1] # urlsplit returns a named tuple with the split sections of the url, like protocol, location, port, query params, etc. split_url = urlsplit(passed_url) # split_url.netloc returns a string with the actual location (in this case, command), without protocol and stuff location = split_url.netloc # unquote decodes the URL-encoded params like %20 decoded_cmd = unquote(location) # this checks whether the decoded_cmd is empty, in other words, the passed_url is just "cmd://". This is to prevent the error below, where we use cmd /c. if not decoded_cmd: decoded_cmd = "cmd"
# finally, run the commmand with cmd /c system(f'cmd /c {decoded_cmd}')
@@wvrld4691 Other than batch scripts, it's not that much programming.
I made a Linux distro once, it was based off of arch linux, all I did was add packages to pre install, an automatic installation script and custom .config files to make it how I want it to be. Of course, what I said was an oversimplication, it really isn't that easy. Also you need to learn to use command line, for UNIX and UNIX like systems.
@@castles990 R U serious telling me I should use a bash shell to create a folder on Windows? U do know that BASH is a shell for UNIX based operating systems and Windows is not UNIX based? Also, why should every computer user have used a BASH shell (or CMD) before? So tell me how am I gonna use a bash shell to perform tasks on a Windows PC (WITHOUT a VM or a Linux Subsystem)? Im interested now. So what you are basically telling me is "Just switch to Linux".
Also, lets not talk about me. I personally use both Windows and Linux and have good knowledge of both OS's and of course I do use the bash shell.
Everything doesnt change the fact that not every computer user used a command prompt or terminal before. You should change it to almost every Linux user.
I'd bet the majority of people don't know what a command line is let alone used a command line. And i'd bet even more didn't know how to create 2 folders at once.
For what would the average joe need a Windows CMD? For opening Chrome? For using MS Office? Think of what you use the CMD for and think if an average user does that.
@@ellie_is_jellie I don't want the game to be popular or anything, I don't really care about that so I'm not going to use money hosting my own servers, but I'll let anyone host theirs
@@0x19 now that i think about it, that makes more sense, although i feel like you should host your own game servers and then add an option to people host their own. it would make it easier for beginners or people that just cant portforward at all
@@ellie_is_jellie which vulnerability? I don't see how this could be exploited... In the cmd: protocol I can see ways to exploit this, but with my protocol it would only launch the game, the only parameters it sets are the room connection ones, there's no code execution in the protocol itself
@@KrasnodarMappingUmbreon251My game works with self-hosted servers. You open the game and you can either host or client (if you host you have to forward a port). You can also choose the port and then, the client uses your ip and port to connect (they enter it on the game's UI). After watching this video I realised that I could make join links without the necessity to run a web server (even though I own one). Most online games with links work in the browser and you can create codes such as https://mygame.org/join/a8dF82K (idk if that web exists) so that other people can join your room, but that would require you to own "mygame.org". What I did was creating a custom protocol for my game (let's say it's "mg"). After the installation of the game changes are made to the registry and the protocol is added. When people host a server they can send a "link" to the clients like this: mg://127.0.0.1:1234, which would open the game directly on the ip 127.0.0.1 and port 1234. This works through a batch script I wrote to write the "url" to a text file, then launch the game. When the game opens, it searches for such file, enters the "credentials", and joins the "room". After that the temporary file is deleted. What the protocol executes is the batch file with the "url" as a paramenter.
This with some sort of confirmation, as showed (before it was removed) should 100% be added to windows. Imagine being able to install something that use scripts for installation, and just click a link on the site, confirm the commands to be run, and boom! Or like for troubleshooting, MS could update all their docs with links like this, to autorun the trouble shooting commands, instead of having to direct your grandmother on how to open cmd, ctrl+c, ctrl+v, enter, lol! Their is so much potential, and as long as it has a confirmation as showed off here, it's not anymore a vulnerability then directing someone to open cmd and copy paste!
Sussysoft AmogOS imposter edition 64 bit. Comes with free DaBaby simulator and 30 month trial of Big Chungus Keanu Reeves wholesome 100 AOL free internet hacks.
Enderman: Has to manually allocate heap memory and do a for loop inside a while loop through the entire length of the string just to parse the URL correctly in C.
Me, using the shorter one-liner code of string.replace() and urllib.parse.unquote() in Python: "You know, I'm something of a programmer myself."
In my view a good programmer knows how to use their tools and time efficiently and succinctly. It takes time to understand that overt arcane knowledge only impresses people who don't understand or comprehend what's happening and frustrates other people who have to touch the code. Please keep using one liner abstractions, we love you.
enderman in 2022 : making my own super decrypt software and then running ransomwares on my pc to test it out
0 likes
2021-07-02 10:45:11
Hello! May I ask you for some advices? I have created my own protocol, i have the network what uses it perfectly. My dissertation got an award for that. (There is a video on my channel how does it work) But i didn't implemented protocol handler, what you did in this video. Can you show us how can we use this handler for a real protocol? for example a traffic jammer or for a request-answer communication what the http does too
Nice and thanks for the vid! I think this also works without adding an URL Protocol string value and also without forcing the default string value to "URL:name Protocol". I'm saying this because I just checked a couple of protocols and for example Zoom uses only the nested entry structure with ZoomLauncher->shell->open->command with the ""C:\Users\user\AppData\Roaming\Zoom\bin\Zoom.exe" "--url=%1"" string in the command entry's default value and "Zoom Launcher - 3.0.1" in the ZoomLauncher entry's default value. uTorrent is also similar: uTorrent.exe->shell->open->command entries. There's ""C:\Users\valen\AppData\Roaming\uTorrent\uTorrent.exe" "%1" /SHELLASSOC" in command's @ , uTorrent.exe @ is empty and shell's @ is "open".
I don't really see the purpose of the protocol but it's a fun experiment. As @Paul Jones said, it's not really a protocol more a URI scheme. It's also not a good idea to have the ability to run commands via a URL tab in a browser, very easy to exploit/social engineer.
You don't see the purpose because you don't need it. If/when you do, then you'll understand. As for security, yes, it can be an issue (because this DEMO handler blindly runs whatever its passed), but it's just a demo; with a real handler, you'd sanitize the input and validate it, like what other programs do.
Honestly I agree with the comment about security issues, although on Chrome OS they do have CROSH (Chrome Shell). They have their own built in protocol. (although I have no idea if it includes the option to put in user input before running the terminal) However since Chrome OS is basically just a linux distro, this is actually just a linux shell so yeah...
Valve actually does this for launching Steam games. If you have a shortcut to one, you might notice that they're actually URLs, with the 'steam://' prefix.
If you were to copy the link used on the shortcuts and paste them in any browser, Steam would actually interrupt your browser and boot up to play your game.
Only because this demo handler blindly runs whatever that's passed to it. You'd have to be nuts to use it for real, you would have to make a proper handler that sanitizes its inputs.
No, the system passes the entire URL as a single command-line argument, so you'd have to specifically parse it for that to work (in which case, you could just skip the prompt altogether, like he did with the later, hidden version).
I don't really know about protocols, but I think that it's not a whole protocol. A protocol is more a big documentation who describe how to treat data. Here it's more a url type shortcut functionality who often serve to define protocol used, but not solely, it can too serve to target an app, like here
Writing a handler in 100 lines of C (on a PC in 2021 🤦) isn't impressive, it would be more impressive if he'd written it in one line in a scripting language. ¬_¬
If you're reading this, about to comment about how bad of a security risk this is or anything of the sort:
This is functionally the same as a batch file. We don't go around saying that batch files are inherently security flaws. This is just a cool little project that shows something cool you can do with browsers' url input and windows' api.
I personally think this is badass, and learned something about Windows I didn't know before. Gives me some ideas about some other cool things I could do with it.
@@user-vn7ce5ig1z I'm not saying it functions AS a batch file, I'm saying that in terms of security, it is functionally the same. Both only reside on a local machine, both are difficult to get someone to use without knowing what they are doing (and a batch file is a hell of a lot easier,) and both have access to the machine almost without restriction.
I'm talking to the people who are saying that all you have to do to perform malicious activity is get a target to click a link, whereas you actually have to get them to implement the "protocol" first. That's where the difficulty lies. And that's where it's less of a security risk than an actual executable would be.
It's not the same as a batch file, it has SOME overlap in functionality, but it is more than just a batch file. A better analogy would have been Steam or Spotify. As for security, it certainly could be abused depending on the handler. In this (demo) case, a handler than just blindly runs whatever you put in the URI is obviously extremely dangerous, but again, it's just a tech-demo; you'd have to be insane to use it live.
Yes, you don't need the slashes at all, a single colon is sufficient for Windows to recognize it as a URI scheme. In fact, if you add two slashes, Windows will append a trailing slash: "cmd:"→"cmd:", "cmd:foo"→"cmd:foo", "cmd:/foo"→"cmd:/foo", "cmd://foo"→"cmd://foo/", "cmd:///foo"→"cmd:///foo".
That's cool.. I can imagine how many things work.. The browser probably do what you did automatically with protocols such as http.. Other applications probably do the same with their own custom protocol.. I don't really know.. But, this how it could be.
I actually used Python, it did not work. I used another Python program to output arguments. The reason it was not working was no arguments were passed when I ran the program to output args. The arguments checker only was 40 lines while parser was 37 lines.
2021: I made my own protocol 2022: I made my own browser app 2023: I made my own computer 2024: I made my own robot 2025: I made my own tech company 2026: I made my own country 2027: I made my own planet 2028: I made the whole entire universe
Because he's using C… in 2021… on a PC (rather than an embedded system or micro-controller). 🤦 This is why God invented scripting languages where you could write a handler in literally one line. ¬_¬
I must finally learn advanced C++, 'cause I know only basics and object basics for now. Today if you would ask me to make something like your parser, I would go with C#.
OMG that’s a disaster from the security point of view. Now you don’t need any RCE vulnerabilities, you can just execute what you want on a remote machine 😂
Not using any Microsoft RAM hungry Web-based control, nor any Chrome-breathing products shoved by Google in everyone's face. Just a fully working web browser made in Visual Basic .NET, since 2009. It has a Internet Explorer 2.0 level of render, but it works fine.
How so? 🤨 The Uninstall Tool is a development tool and Process Hacker just lets you get information about and manipulate processes running on your system (I prefer Process Explorer and Prio).
But here I have a question. I had similar issue with the context menu command, You had with Your protocol. I wanted to make a context menu that would would open a a webpage on specific browser with specific address, but with part of it being a filename without extension. But I couldn't do that right.
Correct, it's not a protocol, it's just a URI handler. Correct, it's a vulnerability, but that's just because it's just a test demo. A real handler would sanitize its inputs.
Andrew do you remember u made a alphabet video with disk drives Could u make a video how to move space from 1 disk to another (in my case from disk F: to disk C: )
It can be whatever you want, it's just a program like any other. But yes, the handler can be as little as a single line of code (or even nothing at all, it can literally be a program that does not hing and exits if you want). 🤷
I don't think there's a way to do that without injecting into system files (which is a pain in the ass and you'll have to break the WiNdOwS aUtOmAtIc RePaIr as well because otherwise it's gonna fix the system on the next restart)
Man, you could make a program to automatically create local protocols just like you did, with a cool interface for the user create its own protocols easily without have to code and edit registry, just for noob users like me!
Or just a program to install the protocol that you made, and this program could also remove that cmd window that opens before the action and stay behind it until you close it. Cool idea bro, you inspired me!
can i launch any program i want with this? i it would be awesome to make a few protocols for .exe files i use regularly and execute them from within my browser
Why? Just write your own and have it do whatever you want it to do (or even do nothing at all). All you have to do is strip the scheme name from the only argument that gets passed to it.
Guy turns his browser into a terminal, has technology gone too far? Is javascript the mark of the beast? Find out on the next episode of Poettering's Bizarre Adventure!
Except it has nothing to do with Chrome, the URI scheme will work on Firefox, or even in Windows (eg in the Run dialog). So you can still get rid of that virus called Chrome. ¬_¬
I don't think you should describe those as "local protocols" but rather "URI Handlers", that would be the correct name. Although great vid like always!
Hey, did you hear that the new YouTube Sans Bold font? It adds the new font, replacing Roboto to the video title. And it's on all videos. Please make a video on that.
It won't work without a parser because the system passes the whole URI to the program. (I don't know why it does that, it certainly doesn't have to. 🤷 Maybe it's just for backwards compatibility, like the spelling mistake in the HTTP REFERER header. 🤔)
For what, the REG file? That's already in the video. The protocol-handler? That depends on what you want it to do; all you have to do is take the single command-line argument and extract the argument from it, eg substr(arg[1],5) (assuming the scheme is something like "test:" (5 characters) and it's a 1-index language).
To what end? He already showed you how to install the handler, and you can write your own handler to do whatever you want it to do (or even do nothing at all).
There is no protocol ... just handing request on specific URL scheme (any macOS app do it easily). The P of ftp, http, ... means protocol. mail:// is not a protocol , it's smpt.
Forsooth, technically it's just a handler. Unfortunately, many people misuse many words frequently. 😒 The worst part is when people who don't know better hear and spread the incorrect usage and make it even more spread. 🤦
Can you do a tutorial on custom responses on protocols? for example: "enderman://channel" leads to your youtube channel ( local ofc ) m, thanks for your awesome content!
@@the_agent_z No, this is a scheme-handler, not a CGI handler. Your example is confusing anyway. What would other examples be? enderman://phonenumber? enderman://favoritefood? 🤨 If you mean something like yt:enderman, yt:jimbrowning, yt:pappamonkey, etc., then you could simulate it by having the handler strip the scheme name, look up the URL of the YT channel, and run http://<channel>
No, because the system passes the entire URI to the handler. Running "test:cmd /k echo blah" would try to run "test:cmd /k echo blah", NOT "cmd /k echo blah"; that's why you can't run the argument directly and need to write a handler to strip the scheme name from the argument.
Man, i think it could be possible to have chrome ommnibox engine in place of stupid Windows search. I just wanted to click that search button on taskbar and have this sexy omnibox to open programs just like Windows search, work with custom protocols just like type a custom keyword and press tab to search on a site and almost search inside Windows apps or input a command on cmd just like you did with that omnibox. I would like so much a fusion of Chrome's omnibox and Windows search. Just my idea, but they don't give a fuck to users that install pirate versions of Windows.
This is DEMO for testing purposes. A real handler wouldn't (SHOULDN'T) blindly run whatever its passed; it would (SHOULD) sanitize the inputs and validate them).
This would be more useful if the stdout of your program could be loaded into the browser. You'd basically have a CGI web server on localhost without the socket layer.
There are already videos of that. You don't need a TPM module to download the ISO, you only need it to run Windows 11, and even then, you don't need it at the moment (people have installed it without one), but you probably will need one with the final build and the hacks to get around it will likely be patched out.
There's no point to using his demo code, just write your own and make it do whatever you want. The only thing you need to do is to strip the scheme name from the only command-line argument that's passed (or even just do nothing at all if you want).
I dont see how doing so would increase your attack surface even by 0.00000000001%. I would be WAY more worried about exploits in existing ones like steam, skype, discord etc.
If you don't have admin privileges, then you can only add the URI scheme to your own user account's registry (HKCU), not the system registry (HKLM), so when it runs, it would run with your user privileges, not elevated privileges. For all intents and purposes, it's limited to whatever you can do by using the Run dialog.
Why indeed. Who uses C… on a PC… in 2021? 🤨 C should be reserved for embedded microcontrollers and system-drivers now; use scripting languages for everything else.
You can use whatever you want, but it won't work unless your handler parses it. The system passes the entire URI as a single command-line argument, so if you run "test:cmd.exe /c echo foobar", it will try to run "test:cmd.exe /c echo foobar", NOT "cmd.exe /c echo foobar".
@@user-vn7ce5ig1z That was my question. What would you have to tweak in Linux, for example, to get the same result? Though it's true I have worded it as a "yes/no" question
Yes and no. Other OSes use their own methods of handling URI schemes (and obviously don't have a Windows registry), but you could port the handler to other platforms. How do you think Steam, Spotify, etc. work on other platforms?
Great idea man.. its just i dont want to spoil it but this was nowhere close your protocol nor even something related to networking*. You haven't even touched the networking layer, this is just integration of bash commands for a browser, its application layer, local to your pc...
Because he's using C (in 2021, and on a PC rather than an embedded system or microcontroller 😒 🤦). You can write a protocol-handler in a scripting language in literally ONE line of code (but you have to compile it; you can't execute the script file itself).
The title is misleading. You didn't make a protocol, you created an alias and bound it to a stupidly simple executable to manipulate strings. What you achieved to do, however, was clickbait.
Come back when you actually implement an application layer protocol on top of some transport like TCP or UDP, or even better a transport protocol on top of IP, because what you did here is NOT a protocol (especially since you mention HTTP)
Description .....ng to show you how I made my own protocol in Windows. Making a protocol isn't difficult at all. The problem is the parser that requires you to have programming knowl..... Me What the heck is parser?
Could've just used something like Nirsoft URI viewer and I don't really see how this is a good idea, people try patching ACEs triggered by URIs while you do the opposite.
This is a good experiment and way to learn how to implement URIs in your app, but definitely not a good example.
@@user-vn7ce5ig1z Well, I've seen people who are absolute dumbasses, Enderman is not one, he, flytech and similar YouTubers are very clever. But still.
It's a DEMO. Obviously you wouldn't use a handler than blindly runs whatever its passed in a real example. (At least, I would hope not. 😒 Sadly, I know humans too well to expect better. 🤦)
One Day A Man Decided To Go To The Store To Get Some Milk But Then He Realised The Store Had No Milk Left So He Went To Another Store But Again The Other Store Had No Milk Left So He Just Decided To Go To The Other Side Of Town To The 3rd Store Nearby But Again No Milk Left And He Was Frustrated So He Just Decided To Go Home With No Milk And Wait Until Tomorrow And Then He Woke Up To Get Dressed And Checked If There Was More Milk At The Stores(live )
Well he would need to get a Mac to be able to do Mac stuff, or he could just "hackintosh" some hardware together. As for Linux, the only thing he needs to do is open up the terminal and type in "rm -rf"
How to make a security hole as deep as Mariana trench on your system 101, I mean overall video was cool, but please dont keep that on your system, REALLY
cool, but I dont want it. I have a terminal, as im a Linux user. its fun when you write it and know it yourself, but the fact someone could install a new protocol alongside a program you just installed and unkowningly added a protocol of unkown uses... im happy the browser asks for permision. NEVER TURN THAT OFF... for the love of your pc..
No. Running "cmd:cmd.exe /k" echo will try to execute "cmd:cmd.exe /k echo" which won't work because that's not a program. That's why you need a handler to parse the argument to extract the command (or strip the scheme name). To be clear, "cmd:" is NOT a program; you could change it with anything else, eg: "test:cmd /k echo" and it will try to run "test:cmd /k echo", NOT "cmd /k echo".
To what end? There is no universal handler; just write your own to do whatever you want. All you have to do is to strip the scheme name (and colon) from the start of the only argument that gets passed to the program then do whatever you want with it (or nothing at all if that's what you want).
Good job adding the warning, but please, please don't do this. You can add the ANSI code for "COLOR: black" in a comment and then put malware in a link.
@@user-vn7ce5ig1z i was saying, i see some people do this because they think it is easier for them to run cmd commands. anyone that uses this, go to cmd://echo%20hi and you'd understand, that can be hidden in a link for example
@@b0rtew2ki97 hey bro I din't mean I don't. Know anything in computer I can make a VM! and I am programer I know JavaScript HTML CSS C++ and all I just tested ender man to reply . 🔥
hey mate i got intreasting file form my onedrive (wich i forgot where i got that file) .849C9593-D756-4E56-8D6E-42412F2A707B i donno what is this but i want you make this video
Is there away to make a autorun usb drive to run with out enabling administrator like it does when you plug in your usb drive for your cordless keyboard and mouse. Is that even possible.... your the best technician hacker on YouTube... I've liked and subscribe/share. Please help. Thanks.
All MC blocks have the 'minecraft:' prefix for mod compatibility. This is useful for when two blocks from different mods have the same name. Since this is not a vanilla item, this would need something else. Maybe "enderpcs:'?
How is what possible? He explained how to do it thoroughly enough. If you mean how does it work under the hood, he explained that too, Windows treats protocol schemes like normal file extensions. Your question is vague and ambiguous and unanswerable.
You have to write your own to do whatever you want it to do. All you have to do is to extract the command argument from the single command-line argument (ie, strip the protocol name and colon from the argument).
Installer for what? He already showed how to install the handler in the registry; and as for the handler itself, it depends on what you want it to do, so you have to write your own.
Make In C++ Also And Custom Folder Icons it is virutal machine is created but can you make your own and show me how to if you did 3 subs for you show me how to make an virtual machine in c++ 17
a ruby code for the parser: #[cmdparser.rb] require 'uri'
s=ARGV[0][6...-1]
if s.size>0
s=URI.decode_www_form_component(s)
system("cmd.exe /c #{s}")
end
system("cmd.exe /k cd %userprofile%") The command on regedit: "<ruby-folder-path>\bin\ruby.exe" "<script-folder-path>/cmdparser.rb" "%1"
2:53... LOL. I'm a C# dev and about a year ago I had to write a parser for messages from an Arduino Bluetooth module, it was a terrible experience. Now we have nanoframework in dotnet, so it's all cool now. I no longer have to write terrible C code like that. Oh, the memories. PS: Why are you using `ULONG`, shouldn't a regular int do just fine? Although this isn't technically a protocol. It's very unsafe. But very nice!
@@user-vn7ce5ig1z I mean, you're right about C being unsafe, but that doesn't make it obsolete. C is used in a variety of memory or speed critical applications. And I find C and cpp way more readable than say python. C and cpp cannot simply be replaced with something as high level as many scripting languages. Rust took a pretty good shot at it well... The syntax...... There are 2 problems I find myself in when using those kinds of languages: - Their poor performance. (Not talking about rust here) - Their syntax. I'm used to the ways of C based languages and so are most developers. I mean yes, people say that stuff is harder in c/cpp and they're not wrong. But when I'm working on a new big project, I turn to C#, C, and cpp, not python because of the above mentioned reasons. Plus, I have a lot of my own infrastructure that's written in c#, c, and c++, and the interoperability of c# in python is just meh. Then there's Cython which aims to solve the performance problem, but still doesn't solve the syntax. Oh and there's the fact that some languages and dynamically types, which in my opinion just enables for terrible API design. Also, C++ is used a lot in game development.
• He shouldn't be using C on a PC in 2021 at all; C should be reserved for embedded systems and micro-controllers, and system-drivers these days. Scripting languages will suffice for everything else now. 🤦 • It's unsafe because it's just a demo; a real handler would sanitize and validate its inputs (or at least should).
I've made my own file extensions etc. Registry is lot's of fun. I THINK you can do what you did. By right click-open as & save association. Go from there.
You've implemented a URI scheme handler and registered it within Windows. That lets you define the "scheme" (the cmd part, e.g. http:// ergo cmd://) and what application you want to let handle it. A protocol defines communication between multiple nodes in a network, or objects in a graph, codifying, or standardizing, a pattern of signals so that data can be transmitted. It literally is about defining semantics to eliminate ambiguity.
PH NO MY SYSTEM CRASHED BUT I LOST AL MY DATA AND THERE WAS AN CMD, A CMD ISNT ENOUGH YOU NEED PROTOCOL, MY NAME IS PROTOCOL AND STEALING YOUR KIDS IS MY MOTTOCOL
Mcfee didn't kill himself, He was actually murdered, You can check his tweets that he know it was coming, He talked about the deep state and stuff.
Suicide because of tax evasion?, You have to be so dumb and ignorant to believe that, Or a libtard.
Wow. Cool Idea. But I think this protocol would have security flaws as websites could theoretically carry out this protocol without the user's permission
1365 likesReplies (45)
@@Endermanchthats true but some people may click it anyway
0 likes@@tslivede `rm -fr /` but in windows
0 likes@anonomyssome0ne965
0 likesTYPE “rd C:\ /s /q” WITHOUT THE QUOTATION MARKS FOR FREE ROBUX AND 999 FPS IN FORTNITE BATTLE ROYALE
@@sagegeas9205 mostly businesses and people using windows xp
0 likes@@tubbunny ooh that could be a dubious exploit if ever
1 like@@thebelovedmoon Token grabber
1 likeIt asks if they want to pass the command through though
0 likes@@kukuruzka firefox also has that
0 likes@@Endermanch how do you get this
0 likes@@Endermanch i know im late but can you but the parser up for download?
0 likes@@sagegeas9205 true, true
0 likesEnder's Praser has a "allow passthrough" plugin which you have to type y or n to execute the command
0 likes@@7xmoon409 😮
0 likesWeb locker
1 like@@thebelovedmoon you can't run elevated programs if you yourself aren't elevated, that's not the browser, that's the operating system, you can't go around it
0 likes@@user-ge4uk9ui8y true, but like I said, it CAN have the ability to run elevated progs without elevating the host (eg. the browser)
0 likesthere may be an exploit to demo that
@@thebelovedmoon if the browser isn't elevated, then it can't start elevated programs
2 likesTi ti ti.. titi Dora!
0 likes@@G-u-z-i-o but I wanted the free vbucks :( 😞 lmao
0 likesSomething at least 3 lines and sounds smart is this reply. Isn't that what the original comment was for?
1 like@abo little bit/))) /
0 likes@@falsehope4421 regardig 'http://' and 'https://'... These protocols are commonly used and are handled differently today. You'll most like find a handler that points to Internet Explorer, even though you have a different browser.
0 likesRemember! What he made is not really a "protocol" as such, but rather a handler for a custom protocol / URI Scheme like 'example://'.
You register the scheme, points to an application it should launch, and it'll call that application with the URI path as arguments.
How browsers handle such custom schemes could differ. But if they support the scheme, they'll have integrated actions... If not, they'll ask the operating system if there are any registered handlers for that scheme. If there is, it'll get the name of that handler and ask the user if he/she wants to launch that application.
@@falsehope4421 this is not something you upload to 'google' and such. This is a protocol handler for a custom URI scheme.
0 likesCreating such is quite normal for starting applications from a web page.
As an example, shortcuts for Steam games uses the custom URI Scheme 'steam://rungameid/*game-id*'
You can navigate to this in a browser as well and it'll ask you if you want to launch Steam. In this case 'steam://' is the "protocol", but it's only available if you have steam installed.
His protocol handler example can be harmful, but only on PC's that have installed and registered his handle.
@@falsehope4421 He typed it directly in the address bar, he didn't call the protocol form a specific site. There's no way to trust the source then...
0 likes@@HandyGold75 a yes/no prompt would be cleaner.
0 likes@@anonomyssome0ne965 He did this, look at the debugger he used :P
1 likeI mean you can already fingerprint computers via protocol flooding (even on tor)
0 likesEven though this is actually right, I think that, what Enderman did was merely a demonstration -hense he used a simple program he created to pipe the commands onto cmd
2 likes@@Endermanch I have a vid idea using ntlite if you can please try 1 gb win11 or any other program
0 likesEdit: I meant win11 under a gb
a good idea that enderman could add is a box that says "Are you Shure you want to execute the command Rd C:/? ONLY CLICK YES IF YOU UNDERSTAND THE COMMAND IT COULD BE A VIRUS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
0 likes@BENJAMIN LEBRON GONZALEZ I had a crypto miner once, and it was so new that when I manually scanned it in Windows Defender it would go "nothing wrong here"
1 likeAlso pushed it to Virustotal and it had a low detection rate in the beginning, and then after a week or so it was being detected as a virus lmao. Also the miner exe was created by a vbs script on startup which I had to manually find as that went unnoticed. I feel bad for not keeping that script. Maybe I could find it somewhere in my old drive if I didn't delete it.
@@honestlyidk2585 yeah sure, but there already exists plenty of ways for a virus to stay active all the time. This is one of them, but too high level to be practical IMO, lower level stuff like rootkits and startup scripts are just plain better
0 likes@@remty516 may sound stupid but you could change an existing key that is commonly used to run the commonly used app and a virus in the background obviously this isn't the most efficient way to do it tho
0 likesNo one speaking of the fact you have to execute software first to install the key? Dumb kids will always get viruses (I know I did), and registering a protocol is not the easiest way to do it. There is nothing new here.
6 likes@@tslivede browsers only save the choice for that specific website. chromium based ones at least.
0 likesJust type your command i.e. cmd.exe /c example.exe in the adressbar of explorer. No need for your own protocol
0 likes@@thebelovedmoon good point if someone is skilled enough
4 likesI could also think of one flaw where in one protocol (I'll use cmd:// for instance), it runs a program in an elevated state even though the browser doesn't...
8 likesthe only turning point is how to exploit that flaw, I suppose
@@Endermanch Remember pal; most people are that careless. Internet Explorer still has users.
26 likes@@Endermanch it could be somekind of phishing related attack, ppl download and run random stuff so i won't be surprise if it happen...
29 likes@@tslivede what a careless act to have this thing enabled
95 likes@@Endermanch Cool I didn't know that
11 likesIn chromium based browsers you can click "remember my choice" button
41 likes@@Endermanch However, in some browsers you only need to accept once and the browser can remember that some protocoll was accepted...
155 likesAnd usually that means if e.g. cmd://winver was accepted and remembered, then the browser also won't ask again if the next url is somthing like "cmd://del /r C:/"
(only the protocol is remembered, the "payload" is usually ignored)
web browsers have in-built protocol consent screen which will always be activated no matter what, unless you purposefully turn off security features
469 likesThis man is how my grandparents view me
1865 likesReplies (46)
Tall and good looking?
0 likes@@MeowieGamer wtf....
0 likesSame it's when I am updating my Batch OS
0 likesYes
0 likes@Eren Yeager windows key + .
0 likes@Eren Yeager lmao
0 likes@@mishaproduction mhm
0 likes@@mishaproduction damnnn u destroyed him right there
0 likesJust a protocol.
0 likes@@Dxeam no he right
0 likesSame
1 likeLmao. Creating ur protocol is everywhere and i can make a "new"protocol by cooy pasting
0 likesthis argument is pure cancer
0 likesActually he is not a man, he is a ghost
1 likeLOL 😂
0 likesFr
0 likes@@Daniel-cc6gs so? I will cry when I want to, no one can stop me.
0 likes@@beanosuwu5168 Bro, go to touch some grass
1 like@@HeidenLam so? did i start crying about my mood getting ruined
0 likes@@Daniel-cc6gs Dude it's not like you didn't do the same thing
0 likesok
0 likes@@HeidenLam thank you for caring enough to read the argument fucktard, the moment you saw my reply you could have stopped reading and just go watch the video
0 likes@@Detoox21 beanos guy said "I might be overreacting" and proceeded to complain about it, what do you expect my guy of course he is gonna start a war
0 likes@@Daniel-cc6gs Thank you for disgusting my mood, imagine picking up meaningless arguments
0 likes@@Supertoad226 ha
0 likes@@MeowieGamer yea
0 likesSame
0 likes@@beanosuwu5168 who asked? man laid out a paragraph lmao
0 likesdo we look like microsoft word?
@@beanosuwu5168 who asked? man laid out a paragraph lmao
1 likedo we look like microsoft word?
same
0 likes@@beanosuwu5168 lmfao
0 likesStaph, ur literally porting Twitter to a YouTube reply
0 likesThis is so true- not gonna lie :/
0 likeshold on let me get my popcorn
0 likes@@beanosuwu5168 coincidences cant happen yes
1 likeOh boy, here we go again.
1 likeI love the Youtube reply section.
@@Daniel-cc6gs it was quite literally ironic
1 like"Oh look an original comment... SOMEONE COMMENTED SOMETHING LIKE THAT 3 MINUTES AGO, YOURE OBVIOUSLY A STEALER GO TO HELL " like its really fucking obvious the hell is wrong with you people
"But I've only turned off the computer, grandpa"
8 likesThis is how my parents view me
1 like@@unixkeys7494 same
1 likemy grandparents view me like this man because i am like him
3 likesSame.
1 like@@Daniel-cc6gs uwu
1 like@@flickaru ah yeah, what beanos uwu guy said was a really funny joke
9 likes@@beanosuwu5168 bro, do you think anyone fucking cares, stop crying about someone copying a comment
33 likes@@beanosuwu5168 are u joking lol
20 likesenderman in 2021 : making my own protocol
1068 likesenderman in 2022 : making my own operating system
Replies (84)
Well here we are in 2024. I only just got introduced to ender, so idk if any of this has happened, but I wouldn't be surprised to see the OS part
1 like@@_tr11 hello
0 likes@@danieleremin1924 hello from 2024
2 likesTempleOS
0 likesEnderman in 3000 AD: proof that bill gates lied to you and he didn't leave microsoft
0 likesEnduhman in 2023: I made my own super server with 10^999999 terabytes of storage to store all my virtual machines in!
0 likes@@danieleremin1924 r/wooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooosh
0 likesEnderman in 9999: makes new universe
0 likes@@TeoKA19 Ender man in 35942: creating a universe
0 likesnot true, still no actual os
0 likesEnderman(Andrew) Making new robot
0 likesEnderman in 10000: making my own space
0 likesdumbass he already made windows ctac
0 likesEnderman in 2500: Making my own planet
0 likesWhat we should do in linux? And thanks for this
0 likesYou've never heard of jdh, have you ?
1 like@@龗 well you can but making your "own" OS needs assembly
0 likesbruh
0 likesup XD
0 likeslinus torvalds in 1991
2 likesimma do it myself
Linux from scratch.
0 likes@@lupus-griseo cyberlife 2077
0 likesenderman in 2023: making my own UFFI frimware
0 likesEnderman in 3000: Making waterproof enderman
1 like@@cidsx sure, whole pc thing is just about translation, synthesis thoughts on different elements. A good translator will get to that point sooner or later.
0 likesenderman in 2023 make an desktop OS with pure Python
0 likes@@cowclan3382 good grammar dude
0 likes@@cidsx True i am a programmer and im working on being ahead of microsoft i am making Windows 13.its just really time consuming
0 likes@@danieleremin1924 enderman in 2024: fine, I'll mine the raw materials myself
1 like@@FFGAMER-et4dc yeah ctrl c + ctrl v
0 likesNo in 2022 he will make his own search engine
1 likeGotta wait untill enderman made his own version of windows 😳
1 likeU all act like he did a job no one is capable of and u al view to this copy pasted stuff like it is hard to do it
0 likesI'd honestly use EnderOS
0 likesPaulo Constantino in youtube has advanced, has his own computer created by him and his own operating system and is public for connect and testit, sol-1.org
0 likesMaking a Os isnt that hard (Depending on how good you are at programming.) you should learn x86. Most virtual machines let you run compiled x86. Its pretty fun to do.
1 likeEdit: It takes a lot of time tho.
@Ma1w4r3 enderman in 2100 : re incarnating as an operating system
0 likesEnderman in 2024: making my own ender gpu 2000
0 likes@@brawlstars-mobile8376 هلااااو
2 likes@@7Maj هلا بالعرب 💚
1 like@@user-ri3wb6gw2k هلا بالعرب .. ما كنت اعرف ان في عرب عند اندر مان 😂
1 like@@龗 Some people did it only in assembly. Look at MenuetOS.
1 likeEnderman in 2030: making my own solar system
1 like@@cowclan3382 thats just a windows bootleg. he's referring to making it complete from scrach
1 like@@user-ri3wb6gw2k bruh
1 like@@bracesoftware Yes
0 likes@@pentagonanimates Oh ok
0 likes@@SunIsLost no, someone else
0 likes@@nocturn9x oh-
0 likesENDERSOFT ENDEROWS
1 like@@pentagonanimates SuperPlayer56?
0 likes@@pentagonanimates file extensions aren't "made". I can have a ".wtf" file and make it work with my program. You can store jpegs in a .mp3 file, what matters is the content. The file extension is only used to let the OS know which program it should use to open that file
1 like@@SunIsLost you remind me of someone.........
1 like@@龗 Someone made an entire os in common lisp (look up mezzano OS). Trust me, you CAN make an OS in pure C and most of them are built with pure C, don't say random bullshit lol
1 like@@defalt2384 Well LFS is literally just a big Lego after all, you're not building anything from scratch, just putting pieces together, so I agree
0 likesLol yes
0 likes@@cidsx Well, even if you start out with a baseline there's plenty of stuff to design. Graphical interfaces and driver support are 2 of the most major challenges
0 likes@@forgetmemes5786 wha t
0 likes@@nocturn9x Nobody said that it had to be fully from scratch. Most people or orgs that make operating systems still use something else as a base.
0 likesStolen comment
0 likesme in 2021: making my own file extension
1 likei know how to do that
@@ngspace9829 True.
1 likefor os you can use COSMOS
1 likeلقيت عربي بقناة اجنبي اخيرا :)
1 likeEN : i found an arabic man in english channel :)
Enderman in 3021: making my own parallel universe
0 likesEnderman in 2690: making my own asdcguikgjhw,cdsgjhkdsfgnmwfefghjkffdgujm
0 likesEnderman in 2350: making my own planet
1 likeI know already what an enderman and its spawn egg is, but I don't know how to make it pick up a pumpkin
0 likes@@danieleremin1924 Enderman in 2024: Bulding quatnom computer.
2 likes@@cidsx you clearly have no idea what you're talking about. come back when you can design a kernel, lol
2 likesMaking an OS is one thing, making an OS that's usable and stable is a whole other thing
yes, probably :D
1 like@@minecraftify95 Dum dums don't know those.
0 likes@@cidsx But the kernel part is a nightmare. Try preventing all the memory leaks and overflows and making sure it runs well on 1GiB RAM with only pure C.
1 likeyk you can download and customise the linux kernel, and the free bsd kernel
0 likes@@mathieu9626 Making an operating system that boots up and nothing else is easy, Making one that does stuff depends on the stuff you want.
3 likes@@danieleremin1924 Enderman in 2024: Making my own metal
3 likesenderman in 2024 simulating earth with pc viruses
3 likesTbh making your own operating system isn't hard, it's just really time-consuming
7 likes@@danieleremin1924 tetris os
12 likes@@cowclan3382 Actually, Windows CTAC is just modified Windows XP. It doesn't count as completely making your own operating system.
10 likesEnderman in 2077 - simulating the life in his own operating system
22 likesActually, takes alot of time but not that hard
11 likesEnderman in 2150: making my own galaxy
44 likesEnderman in 2023: making my own computer parts
74 likesEnderman be like "I don't think there are enough RCE vulnerabilities in my system. Imma make one"
58 likesReplies (1)
Lmfao
0 likesAlternate title: Enderman single handedly makes the most vulnerable protocol on earth
410 likesReplies (10)
@@bottinator22 that's just a debug window that he put in
0 likes@@moonbarc the URL protocol file:// is rejected for websites
1 likeI think it's safe to assume a random website won't be able to use local protocols like that
Plus Windows asks you it seems
@@OliverK-w8m the flaw is to the computer, not the site
3 likes@@OliverK-w8m it lets any website execute any system command on your computer
6 likes@@moonbarc But does this make it easier to target websites? I'm trying to figure out it's funcionality.
1 like@@OliverK-w8m it could literally do anything to the PC
0 likes@@moonbarc Can it make a website laggy over a period of days? Modify data flow to the site?
0 likesLuckily it's local 😅 only
9 likes@@anonomyssome0ne965 you could achieve the same effect with cmd://
25 likesno, gain-remote-acess:// is more venerable
3 likesnext up:
83 likesmaking my own kernel and architecture so i can install malware without windows stopping me
Replies (16)
@@龗 clam av exists and even then antiviruses are a scam most of the time to begin with you don't need a antivirus
0 likes@@jonasgrill1155 you can use Windows Customisation Tool
0 likes@@jonasgrill1155 Well I managed to do it by going into a windows PE and removing all of the files related to it
1 like@@Ak-jx9ob lol
0 likes@@killertigergaming6762 Linux is a kernel, GNU is the software in it. It has NO security software, but you can install "sudo" or "doas" to have password security, and there is "ClamAV" but it sucks tbh.
0 likes@@lxrenz This will only delete the Defender files, if you really want to delete Windows Defender, you need to do some other things too.
0 likesSmart 100
0 likes@@killertigergaming6762 beacuse wine is not the hyper technology also linux can't run .exe files without wine.
0 likesYou can do that on linux but the chances of the malware actually working is pretty slim due to linux having not trash security
0 likes@@lxrenz hm. Seems like a bad idea to disable all security on your PC, but you do you I guess.
2 likes@@jonasgrill1155 for me my pc its fine.
0 likes@@lxrenz well sure, if you delete system files you can, but knowing Windows deleting those files will probably break something completely unrelated.
1 like@@jonasgrill1155 yes its possible. delete sc.exe, smartscreen.exe and SecurityHealthService.exe from system32.
0 likes@@jonasgrill1155 yea
0 likes@Lxrenz113 Aviation: it's called a joke
@@lxrenz it's pretty much impossible to completely disable Windows Defender though.
2 likesThere is a thing called disable antivirus
0 likesgod we love websites opening command prompt :)
211 likesReplies (11)
@@alfiewhitson7726 you calm down, it was a joke
0 likes@@vistaman1 calm down children
0 likes@@taureon_ yes..... safe
0 likeshesitates
sure
@UCAIwYL67Hcf6AMHnJhvvH2w you stfu, it was a joke
0 likes@@vistaman1 stfu I was just trying to help, he said ‘website’ which is wrong
0 likes@@crazypvpHow no shit sherlock
2 likesit wouldn't work if you don't have the local protocol
4 likesno security risks at all
9 likes@@finnbarm and then removed it for extra fun
17 likesHe added a confirmation thank god.
19 likesseems like a safe thing to do!
53 likesHope MS will merge it in Windows. Such a good command execution exploit : )
88 likesReplies (9)
@@kolt5511 yay!
0 likesFlower!
1 like@@kolt5511 Website: "Make your PC faster" User: *clicks button* Website: "By Deleting system32"
1 like@@kolt5511 true if the browser is trash
0 likes@@emblemi6345 I don't know man, you have been acting sus lately, it seems that we have an impostor among us
3 likes@@lowrhyan567 what stops to add one more?
2 likesMS doesn't need to add nothing to have a big security risk on their system, just search these "EternalBlue", "SMBGhost", "SMB CVE"
2 likesWould be a very big security risk for your computer. Imagine you enter a random unsuspecting website and it starts to erase System32 LMAO.
20 likesWouldn't be surprised if it's one of the only new things in Win 11...
9 likesMe on Linux: look what they need to do to mimic a fraction of our power
222 likesReplies (14)
@@ezweber_the_great Agreed. i use arch, and its not so bad.
0 likesArch users on top! Also when will you people learn that kali is a terrible desktop distro unless you spend 90% of your day pentesting stuff.
0 likes@@aguiar.8181 nobody in IT actually knows what hes doing, everyone is always pushing the edge^^
1 like@Harsh Raj okay
0 likes@Harsh Raj let me tell you that kali isn't meant to be used as a daily driver
2 likes@@aguiar.8181 kali is built like shit lmfao
3 likes@@p6n7l Kali is the only way to go if you know what your doing 🌝
0 likes@Harsh Raj1337 h4x0r
3 likesReally easy on Linux, just create a file called ~/.local/share/applications/whatever.desktop with these contents: (important: it's case sensitive)
4 likes[Desktop Entry]
Type=Application
Name=whatever
Exec=path to executable %u
MimeType=x-scheme-handler/your scheme
Optionally add 'NoDisplay=true' to hide it in the launcher
@@dllsearch For life btw
6 likes@@p6n7l 4 days ago...
2 likesHey, do you still uses arch?
i use arch btw
45 likesMe on Master Gaming OS: amateurs
0 likesewwwwwwwwww
7 likestechnically you're defining a protocol handler, not 'creating a new protocol'
357 likesReplies (11)
peepee poopoo >:(
0 likes@@masamune5710 This comment deserves more likes.
2 likeshaha was searching for this comment, but i guess it is the same for non-techies ;)
3 likes@@LostPhysx no its a application level protocol
0 likes@@willinton06 no, all pedantry is inherently true
3 likes@@90hijacked do u have source for this beccause I use GNU/Linux and on my OS what he did in the video is generalized into a MIME Type and done with 1 file and 1 command
1 like@@masamune5710 it ain’t pedantry if it’s true
8 likesAll this pedantry in the comments, why don’t you go define some bitches🤨
16 likes@@LostPhysx URI Scheme handler* according to the freedesktop spec, still the term protocol handler is thrown around often enough
18 likesActually it's called an URI handler. It doesn't even remotely have something to do with a protocol.
75 likesyeah lol
8 likes4:04 Using command prompt to open command prompt, that's cool
38 likesReplies (4)
I once opened blender through file explorers path bar
0 likes@@SomeNot I prefer doing it by slowly filling the heap in 8 byte increments, inside a "for(;;)" of course. Takes a while to realize something is wrong.
1 like@ and if you put “start” inside a loop in a batch file, it will create infinite windows and crash your computer.
8 likesYeah it works you can enter "start" in cmd and it will open another one
1 like"It's just over 100 lines long"
15 likesIt sounds like description of 99% of code in my projects folder
Replies (1)
I did this, but for executing python code. Nothing wrong with pasting the script here!
1 likeimport sys
import urllib.parse
import logging
# Configure logging
logging.basicConfig(filename=r'C:\Users\xxxxx\Documents\pyprotocol\script.log', level=logging.DEBUG, format='%(asctime)s %(levelname)s: %(message)s')
def main():
try:
if len(sys.argv) < 2:
logging.error("Usage: py://<url-encoded-string>")
return
# Get the URL-encoded string from the first argument
url_encoded_string = sys.argv[1]
logging.debug(f"Original URL-encoded string: {url_encoded_string}")
# Remove the 'py://' prefix if it exists
if url_encoded_string.startswith("py://"): # It assumes that you are using the py:// custom protocol
url_encoded_string = url_encoded_string[5:]
# Decode the URL-encoded string
decoded_string = urllib.parse.unquote(url_encoded_string)
# Log the decoded string
logging.debug(f"Decoded string: {decoded_string}")
# Remove any trailing slashes or whitespace characters
decoded_string = decoded_string.rstrip('/').strip()
# Log the cleaned decoded string
logging.debug(f"Cleaned decoded string: {decoded_string}")
# Execute the decoded string as Python code
try:
exec(decoded_string)
except Exception as e:
logging.error(f"Error executing code: {e}")
except Exception as e:
logging.error(f"Unexpected error: {e}")
if _name_ == "__main__":
logging.debug("Starting the script")
main()
# very simple to customize, just change a few things
Give a CMD, a Regedit and a Windows 10 PC to Enderman. And see what will happens.
20 likesThat beat at 0:42 really synced with that Steam window popping up.
46 likesReplies (2)
Yes
0 likesyep
1 likeGotta give you some credit for writing a parser in proper C, I was expecting a batch script at most.
16 likesOverall, this is a cool little project. Probably a great learning experience.
Replies (1)
not that hard
0 likesNext up on Enderman:
96 likesI made my own operating system
just realized people stole my comment and got more likes
oh well (Hypé⠀✔︎ lookin at you)
Replies (17)
Actually is not that difficult to do, you could create a Linux distro fairly easy
1 likenice
0 likesJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust Monika
@@yt_user1772 then he gets dmca'd
1 likeI think he works on microsoft cuz he's so smart xD
1 like@@namesurname4666 don't give him ideas
0 likes@@danieleremin1924 check "jdh" guy
0 likeslinux is sus
1 likeEnderOS
2 likes@@namesurname4666 AmogOS
2 likes@@WhirlwindQuest And then "I built my own CPU"
3 likesamogOS
1 like@@cooolgamer YES
2 likesbeen there done that
1 likekinda
Next on enderman: I build my own motherboard
5 likesMac OS big sus
7 likesamogOS
4 likes@Alts'Alts amogOS
30 likesthis is how my mom sees me when i build a computer
35 likesReplies (5)
yes wonder did work!
0 likes@@onmaxxclipzz they didn't get the joke
1 like@@suriyealeppo5415 eh isn't ?
2 likesisn't
0 likeseh
0 likesThat sounds like a very usable idea for creating custom user shells via web design patterns, similar to ChromeOS. You can just strip Windows of all its graphic applications leaving only components necessary for browser, let the browser in and create some webpages to replace Control Panel and so on. Also you can create simple authorization in this interpreter app to ensure local scheme integrity (i. e. no one who already knows you have this feature will be able to open your apps from their site).
7 likes2:46
2 likesEnderman: this code is not that big just a bit more than 100 lines
Me: ok
thanks for this!
"Here's the code, is not that big"
20 likesProceeds to show 10629372026293 lines of code
Replies (3)
@@JohnMkrv dude
0 likesDamn, i wonder how many features that thing has
0 likesBut it really isnt
5 likes• You don't need the "@" entry in the key.
5 likes• Instead of "%1", pass "%L" to accommodate long filenames.
• If you use :// in the scheme, the system will append a trailing slash (cmd://blah → cmd://blah/). Just use cmd:foobar
• It's easier to use a scripting language than C (but you have to compile it; you can't execute the script itself).
this is actually just what I needed!
0 likesyou are a hero my guy
I just gotta make it a bit more secure but all in all this is awsome!
great work my guy
Now I need to be less stupider to actually run my VM programs on my navigator.
24 likesReplies (2)
@@clementpruvost8670 bro use virtualbox and you mac install macOS
0 likes@The Gaming Potato what?
0 likesIdk why, but the intro music is just really good...
15 likesReplies (1)
yeah haha
0 likesThis is like an old school tutorial it’s great
9 likes4:14 Рязанский проспект xD
40 likesReplies (6)
wjhat
0 likes@@atikinbtw если ты про ненависть к России, то я думаю нет ничего такого, что бы высказать мнение о своей родине. Я знаю многих, кто ненавидит Россию, но у них есть разные причины, почему они все ещё в ней живут - финансовые, семейные, и т.п. Может он это написал, что бы его не ассоциировали с Россией, ведь он уже наверное устал отвечать на вопросы "say plz something in Russian"
2 likes@@atikinbtw вроде как он все ещё в России. По крайней мере, когда он ставил раньше Винду, он указывал московское время
1 like4:14 pr3ahcknn npocnekt
2 likesN 4e
0 likesи чё
1 likethis man is what my grandparents see me as lol
13 likesReplies (13)
@@notChocoMilk cry about it
1 like@ChocoMilk cry about it
0 likesLol a cry about it train
1 like@@notChocoMilk cry about it
0 likes@@notChocoMilk cry about it
0 likes@@notChocoMilk cry about it
2 likes@@notChocoMilk cry about it
3 likes@@notChocoMilk cry about it
3 likes@@notChocoMilk cry about it
2 likes@@notChocoMilk cry about it
2 likesMaybe it's just coincidence idk
0 likes@@bitonic589 no? It's 2 minute difference and other guy did it quicker
4 likes@@notChocoMilk Dude, he commented before the other guy idiot
1 likeI love ur Intro :>
1 likeand I love u :D
Such an epic idea! You're the beast of software engineering!
57 likesReplies (16)
@@user-vn7ce5ig1z I mean nobody would fiddle around such stuff and you have to, say, know plenty of stuff including how URI scheming works and how Windows handles them. That's why he's pretty smart to me. Also I'm not a child. I'm literally 18 years old and will turn 19 in a couple of days so your take about me being a child is also wrong.
0 likesFunny how people always seem to think that anyone who knows anything they don't is a genius, like a young child who knows nothing thinks another child just one grade above them is smart. ¬_¬
0 likes@@p0xygen i know...
0 likes@@p0xygen everything is easy if you know. I didn't know so it wasn't easy for me.
2 likes@@makezdtem You could do anything in the registry, rename Windows, change values of anything.
0 likes@@ZeroKyle bru
0 likesh
@@bloomingch lol he's like a bot he spammed almost every comment
2 likes@@minecraftify95 I. Know.
0 likes@@minecraftify95 I already played Minecraft and I know most of the basic informations about it so no need to tell me about it.
0 likes@@bloomingchidk
0 likes@@makezdtem but it won't work on browsers, will it?
0 likesFact: You can mess up with the system environment values to make %desktop% or %minecraft%
0 likes@Evan Hernandez what
0 likes@@nocturn9x +++
0 likesGuys, please understand that this is kindergarten level stuff lol
3 likes@Evan Hernandez K
0 likespsa: if you actually make a protocol to cmd, it could cause some serious security issues by allowing any website to open cmd and run anything it wants
13 likesReplies (1)
But if you added like "Do you want to run "rd c:\ /s /q" in an elevated command prompt?" warning then it you could just type n
1 likeThe songs he used: 1st: NIVIRO - The Labyrinth (NCS: https://www.youtube.com/watch?v=4S0shEqJ8Vc), 2nd: Robin Hustin x TobiMorrow - Light It Up (feat. Jex) (NCS: https://www.youtube.com/watch?v=bdE_SyHad90). He added the name of the songs in the video.
3 likesReplies (1)
Thanks
0 likesI fucking love how you make your videos the same way an old Windows XP video looked like back then.
2 likesHere's how you'd pull this(URL Parser) off in Python:
4 likesfrom urllib.parse import unquote, urlsplit
from sys import argv
from os import system
# argv[1] is the first arg, argv[0] is filename
passed_url = argv[1]
# urlsplit returns a named tuple with the split sections of the url, like protocol, location, port, query params, etc. split_url = urlsplit(passed_url) # split_url.netloc returns a string with the actual location (in this case, command), without protocol and stuff
location = split_url.netloc # unquote decodes the URL-encoded params like %20
decoded_cmd = unquote(location)
# this checks whether the decoded_cmd is empty, in other words, the passed_url is just "cmd://". This is to prevent the error below, where we use cmd /c.
if not decoded_cmd:
decoded_cmd = "cmd"
# finally, run the commmand with cmd /c
system(f'cmd /c {decoded_cmd}')
Me: looks away for a second
0 likesAlso me: Looks back
Enderman: So thats the answer to life!
Next video: " Creating my own operating system "
16 likesReplies (7)
@@mishaproduction true lmao.
0 likesIt's hard to make an operating system and an idiot like enderman that spreads misinformation can't do it.
0 likesBut i copy pasted and my viewers think im 3000 iq edition
0 likes@@wvrld4691 I don't think making a Linux distro constitutes as OS dev, lol.
3 likes@@wvrld4691 dude but the joke is about making something bigger (not about hard) than this
3 likes@@wvrld4691 Other than batch scripts, it's not that much programming.
0 likesI made a Linux distro once, it was based off of arch linux, all I did was add packages to pre install, an automatic installation script and custom .config files to make it how I want it to be. Of course, what I said was an oversimplication, it really isn't that easy. Also you need to learn to use command line, for UNIX and UNIX like systems.
its not hard. making a linux distro is pretty hard for newbies, but for programmers, its easy
0 likes1. I love the NIVIRO song in the vid, so thanks for putting that in.
2 likes2. Also this is really cool! Do something similar to this again!
Replies (2)
@@unpatientes1562 NIVIRO - The Labyrinth
0 likeswhat's the name of the song?
0 likesFun fact:
14 likesTyping "md" with 2 words without quotes will create 2 folders.
Replies (7)
@@castles990 R U serious telling me I should use a bash shell to create a folder on Windows? U do know that BASH is a shell for UNIX based operating systems and Windows is not UNIX based?
0 likesAlso, why should every computer user have used a BASH shell (or CMD) before?
So tell me how am I gonna use a bash shell to perform tasks on a Windows PC (WITHOUT a VM or a Linux Subsystem)? Im interested now.
So what you are basically telling me is "Just switch to Linux".
Also, lets not talk about me. I personally use both Windows and Linux and have good knowledge of both OS's and of course I do use the bash shell.
Everything doesnt change the fact that not every computer user used a command prompt or terminal before. You should change it to almost every Linux user.
@@castles990 that's not what he's even talking about?
0 likes@@paulvorderegger1522 cmd is cringe. use bash instead
0 likesI'd bet the majority of people don't know what a command line is let alone used a command line. And i'd bet even more didn't know how to create 2 folders at once.
1 likeFor what would the average joe need a Windows CMD? For opening Chrome? For using MS Office?
Think of what you use the CMD for and think if an average user does that.
MD means "make dir" or make directory so it obiously will make a folder or how much you want
0 likes@TheThunderGuyS that's what we call a hasty generalization, I have used a computer and did not know this.
3 likesThanks @Aless
@TheThunderGuyS not everyone that uses a computer needs to use a command line
4 likesThis is really good for Online games, Passing the parameter to the game through web protocol
2 likesvideos like these are the coolest! glad i found your channel
1 likeThe Enderman: A mob in minecraft, also loves to use Windows 10
4 likesReplies (3)
@@minecraftify95 0 asked
1 likeloves to use or loves to push it to its limits?
0 likesMake sense its owned my Microsoft now
0 likesI believe you, as a Python developer I have tried strings in C, and it was a real pain.
2 likesReplies (1)
SAME
1 likeI'll be using this to make custom room join links for my online game! Thanks :D
6 likesReplies (7)
@@ellie_is_jellie I don't want the game to be popular or anything, I don't really care about that so I'm not going to use money hosting my own servers, but I'll let anyone host theirs
0 likes@@0x19 now that i think about it, that makes more sense, although i feel like you should host your own game servers and then add an option to people host their own. it would make it easier for beginners or people that just cant portforward at all
0 likes@@ellie_is_jellie which vulnerability? I don't see how this could be exploited... In the cmd: protocol I can see ways to exploit this, but with my protocol it would only launch the game, the only parameters it sets are the room connection ones, there's no code execution in the protocol itself
1 like@@0x19 i feel like you should probably test for vulnerability
0 likesI implemented it :D. Also realised you can do Win+R then type the protocol and itll open
0 likes@@KrasnodarMappingUmbreon251My game works with self-hosted servers. You open the game and you can either host or client (if you host you have to forward a port). You can also choose the port and then, the client uses your ip and port to connect (they enter it on the game's UI). After watching this video I realised that I could make join links without the necessity to run a web server (even though I own one). Most online games with links work in the browser and you can create codes such as https://mygame.org/join/a8dF82K (idk if that web exists) so that other people can join your room, but that would require you to own "mygame.org". What I did was creating a custom protocol for my game (let's say it's "mg"). After the installation of the game changes are made to the registry and the protocol is added. When people host a server they can send a "link" to the clients like this: mg://127.0.0.1:1234, which would open the game directly on the ip 127.0.0.1 and port 1234. This works through a batch script I wrote to write the "url" to a text file, then launch the game. When the game opens, it searches for such file, enters the "credentials", and joins the "room". After that the temporary file is deleted. What the protocol executes is the batch file with the "url" as a paramenter.
3 likes?
0 likeshats off to you for this wonderful video, learned a lot!
0 likesThis seems like a really good project!
3 likesBro singlehandedly created the biggest security hole in earth in his computer
0 likesI can never tell if this man is in his virtual machine or not
4 likesReplies (1)
Same-
1 likeThat's pretty cool :)
2 likesJust keep in mind that it can quickly lead into security issues.
Replies (1)
Except if you add a warning that shows the command and you need to type y to run the command.
0 likesas a socket programmer i was expecting a network protocol never been more disappointed in my life
5 likesI love your tech videos enderman also you have cool username bro
0 likesGreat work!
3 likesI'm thinking it will be good for faster integration between Angular apps with OS protocols without NodeJS.
2:58
2 likesC: 100 lines
Python: -4 lines
"it's not that big - just a bit more than 100 lines"
5 likesReplies (12)
seems like i created the programmers thread
0 likes@@idle-hands what kinda project?
2 likes100 lines? That's rookie numbers. I am currently working on a project that has around 1000!
2 likesFor programming, that's nothing.
2 likes@@RealEpikCartfrenYT YOU SUS? WAIT, AMOGUS
1 like@@kayra_iydrss because I am sus
1 like@@RealEpikCartfrenYT bro why you looks like SUS
1 likeStill 100 more lines than I could write in C.
3 likes@@orress3816 one more true
1 like@TheThunderGuyS true
1 likeI think I'd consider anything below 500 lines quite small, especially if it's a single file program
3 likesyes
3 likesOh there’s a Zune protocol. Nice, that will come in handy someday.
1 likeReplies (2)
@@alexkannes5426 neat
0 likesit is just a link to the microsoft store(i checked it out)
0 likes"Execute protocol EathenetherEnd"
5 likesThis with some sort of confirmation, as showed (before it was removed) should 100% be added to windows.
0 likesImagine being able to install something that use scripts for installation, and just click a link on the site, confirm the commands to be run, and boom!
Or like for troubleshooting, MS could update all their docs with links like this, to autorun the trouble shooting commands, instead of having to direct your grandmother on how to open cmd, ctrl+c, ctrl+v, enter, lol!
Their is so much potential, and as long as it has a confirmation as showed off here, it's not anymore a vulnerability then directing someone to open cmd and copy paste!
Next time: I create my own Linux Distro
4 likesReplies (3)
Easy if you know what Linux is and the basics of it.
1 like?????????
0 likesdifficult, but completely possible
0 likesenderman: makes this
0 likesme: are you challenging me?
Replies (1)
@@minecraftify95 ... do you think i don't know what an enderman is?
0 likesThank you for the cool project! I just finished it myself as well.
4 likesThough I had to rewrite the program in C++ in a much jankier way because I don't understand any of the C from your code.
Replies (5)
or do one thing give me your discord
0 likesYou try giving me yours
0 likesi cannot my comment gets deleted
0 likes@@pradevhuntergaming6218 give me an email address.
0 likesPls share it with me... I need it
0 likesI dont know C or C++
Enderman: makes local protocols that passthrough command to cmd.exe
1 likeHacker: Easy hack
Replies (2)
@@minecraftify95 yes
0 likes@Cristiioan without the debug message
0 likesAmaizing
3 likesAlternate title: "I made a major security vulnerability"
0 likesdid you know that enderman will not pin this comment
4 likesReplies (1)
yes
0 likesEnderman in 2022: making my own protocol
0 likesEnderman in 2050: making my own pc
Next Up video:
5 likesI made my own AmogOS
Replies (3)
@@minecraftify95 it is indeed a sus moment
0 likes@@RealEpikCartfrenYT ahahaha L0L
0 likesSussysoft AmogOS imposter edition 64 bit.
1 likeComes with free DaBaby simulator and 30 month trial of Big Chungus Keanu Reeves wholesome 100 AOL free internet hacks.
That's pretty cool! Didn't know it was this easy.
2 likes4:14
2 likesТы реально живёшь в Малоярославце, или это совпадение?
Replies (2)
Да я понял, что он русский, просто город уточнил
1 likeОн там живет,он Русский
1 likeI love your ideas bro!
1 likethis is good when u work on browser and need something ealse opened fast without wasting time searching the bloated startmenu
3 likesReplies (1)
Or just do win + x
1 likeThis dude in 2084: "Changing speed of time in under an hour."
0 likesEnderman: Has to manually allocate heap memory and do a for loop inside a while loop through the entire length of the string just to parse the URL correctly in C.
3 likesMe, using the shorter one-liner code of string.replace() and urllib.parse.unquote() in Python: "You know, I'm something of a programmer myself."
Replies (1)
In my view a good programmer knows how to use their tools and time efficiently and succinctly. It takes time to understand that overt arcane knowledge only impresses people who don't understand or comprehend what's happening and frustrates other people who have to touch the code. Please keep using one liner abstractions, we love you.
0 likesNot me waiting for him to develop an actual network protocol lol.
2 likesWow! You really helped me!, My dream is make my own protocoll tô games😃😃😃
4 likesReplies (2)
It's really easy if you know how to use the registry.
0 likesyés (si)
0 likesEpic idea, You are awesome, Keep going <3
2 likesВауу,а это может быть полезно. Спасибо огромное за идею и туториал
12 likesenderman in 2022 : making my own super decrypt software and then running ransomwares on my pc to test it out
0 likesHello!
3 likesMay I ask you for some advices?
I have created my own protocol, i have the network what uses it perfectly. My dissertation got an award for that.
(There is a video on my channel how does it work)
But i didn't implemented protocol handler, what you did in this video. Can you show us how can we use this handler for a real protocol?
for example a traffic jammer or for a request-answer communication what the http does too
I just love the fact that he has so much knowledge in Programming languages
2 likesLike dude, I'm just starting to learn C++ and Enderman doing stuff like this really motivates me to learn more Languages lmaoo
Aw why didn’t you use your voice? We would like to hear it!
4 likes0:47 Everyone: Win+R - calc
1 likeEnderman, an intellectual: Chrome - ms-calculator://
Replies (3)
Me
0 likesWin+Q - calc
@@mishaproduction Wait that implies Win+R - calc is dumb but why tho?
0 likesthat way is dumber
0 likesNice and thanks for the vid!
4 likesI think this also works without adding an URL Protocol string value and also without forcing the default string value to "URL:name Protocol". I'm saying this because I just checked a couple of protocols and for example Zoom uses only the nested entry structure with ZoomLauncher->shell->open->command with the ""C:\Users\user\AppData\Roaming\Zoom\bin\Zoom.exe" "--url=%1"" string in the command entry's default value and "Zoom Launcher - 3.0.1" in the ZoomLauncher entry's default value.
uTorrent is also similar: uTorrent.exe->shell->open->command entries. There's ""C:\Users\valen\AppData\Roaming\uTorrent\uTorrent.exe" "%1" /SHELLASSOC" in command's @ , uTorrent.exe @ is empty and shell's @ is "open".
Came for the protocol, stayed for the party ♫
0 likesWhen you don't have a bash shell but still wanna look cool
0 likesi really like making protocols with electron apps, it's so fun
0 likesNice video bro(as always)
0 likesHow parents see you when you restart the router.
2 likesThank you Enderman :), now I understand why some websites can call the application installed on the device from the browser
1 likeI do not like manipulating strings in C...
2 likesVery relatable
Replies (1)
@TheThunderGuyS ):
0 likesnice I love the old school style, straight informative, gj
0 likesI don't really see the purpose of the protocol but it's a fun experiment. As @Paul Jones said, it's not really a protocol more a URI scheme. It's also not a good idea to have the ability to run commands via a URL tab in a browser, very easy to exploit/social engineer.
1 likeReplies (2)
@@user-vn7ce5ig1z Can this make a website a bit laggy? Modify some data flow?
0 likesYou don't see the purpose because you don't need it. If/when you do, then you'll understand. As for security, yes, it can be an issue (because this DEMO handler blindly runs whatever its passed), but it's just a demo; with a real handler, you'd sanitize the input and validate it, like what other programs do.
0 likesthat's super duper cool!
1 likei knew that there has to be a way to do it, but didn't know what that way was :p
how would one go about doing it in linux tho?
are there any scripts or config files that let you configure this?
Really is a func project ^^ maybe in the future this's gonna help me somewhere when I need to access local resources or something
1 likeWow thats amazing enderman
0 likesEnderman: about 100 lines of codes is not much
0 likesMe: Struggles to open .txt file
Honestly I agree with the comment about security issues, although on Chrome OS they do have CROSH (Chrome Shell). They have their own built in protocol. (although I have no idea if it includes the option to put in user input before running the terminal) However since Chrome OS is basically just a linux distro, this is actually just a linux shell so yeah...
1 likeWOW really great editing good job!
0 likesi love the intro very good
1 likeKeep the great content
Endermanch actually creating an entire shell for his local protocol
0 likesThe "c" argument of cmd: Look what they need to mimic a fraction of our power
Replies (3)
@@minecraftify95 I play Minecraft too, but months ago his name was Endermanch
0 likes@@elihillman8758 In batch we can easily take part of string with %variable~4:5% or a thing like that
0 likesIt needs the thing to parse the url that gets passed to it. It passes the whole url to the program.
0 likesThis is pretty cool. The music, though, makes it sound totally EPIC!
0 likesValve actually does this for launching Steam games.
0 likesIf you have a shortcut to one, you might notice that they're actually URLs, with the 'steam://' prefix.
If you were to copy the link used on the shortcuts and paste them in any browser, Steam would actually interrupt your browser and boot up to play your game.
Replies (2)
@@inkoalawetrust I didn't see that while I was typing a comment about it.
0 likesThe irony
Yes he mentioned how Steam uses a custom protocol to open up the Steam application from browser links lol.
0 likesEnderman 2021 - i made my own protocol
0 likesEnderman 2040 - i made my own operating system with kernel built from scratch
Next video:
1 likeThe protocol which can KILL your PC
Replies (1)
Only because this demo handler blindly runs whatever that's passed to it. You'd have to be nuts to use it for real, you would have to make a proper handler that sanitizes its inputs.
0 likes“It’s not that big” I’m sure it has great personality :(
0 likesthis vid has some hard 2010s youtube tutorials vibes 😳
0 likesAnd what if you pass "y" after the first argument? will it run the command automatically?
1 likeReplies (1)
No, the system passes the entire URL as a single command-line argument, so you'd have to specifically parse it for that to work (in which case, you could just skip the prompt altogether, like he did with the later, hidden version).
1 likeenderman in 68901 be creating dimensions
0 likesCommenting before the premiere even starts
1 likeI don't really know about protocols, but I think that it's not a whole protocol. A protocol is more a big documentation who describe how to treat data. Here it's more a url type shortcut functionality who often serve to define protocol used, but not solely, it can too serve to target an app, like here
0 likesCreate your own chrome web browser protocol in windows!
1 likeLinux users: _wat is this madness_?
Me: Sees parser code
0 likesMe: *SELF DESTRUCT IN 1.00*
People who don't know how to code: Enderman: not much code, just about 100 lines
0 likesi rlly dig the new style of the channel
0 likesWhen i open cmd and accidently make like hacking code:
0 likesMe:im hacking bank
My dad:we need to go jail
Me:oh shit
IS THAT LABYRINTH?? I LOVE THAT SONG!!!!!!!!!!!!!!!!
0 likessong NIVIRO - The Labyrinth
0 likesenderman in 2023: making my own internet web
0 likesThis really helped me in my class project.
0 likesmy guy has very good taste in music!
0 likesfellow NCS enjoyer here 😁
Bro this intro is amazing
0 likesThis is how my grandparents view me
0 likesenderman do be grabbin some protocols tho
0 likesWhat's the wallpaper?
1 likeSong: The Labyrinth
0 likesNIVIRO
Came for the protocol, stayed for the music
0 likesI made a code, not much just a bit over 100 lines of code
2 likesMe: holy sh*t
Replies (4)
Writing a handler in 100 lines of C (on a PC in 2021 🤦) isn't impressive, it would be more impressive if he'd written it in one line in a scripting language. ¬_¬
0 likescmd its funny
0 likesxd
0 likes@@suriyealeppo5415 well, i didnt put that "i" in because there is always that 1 guy who reports
0 likes2:52 nothing big just a bit more than 100 lines
1 likebro... the music 2:37... wats the name
1 likeRare moment of enderman not spending 90% of the video in a vm
0 likesAmazing Idea
0 likesIf you're reading this, about to comment about how bad of a security risk this is or anything of the sort:
0 likesThis is functionally the same as a batch file. We don't go around saying that batch files are inherently security flaws. This is just a cool little project that shows something cool you can do with browsers' url input and windows' api.
I personally think this is badass, and learned something about Windows I didn't know before. Gives me some ideas about some other cool things I could do with it.
Replies (2)
@@user-vn7ce5ig1z I'm not saying it functions AS a batch file, I'm saying that in terms of security, it is functionally the same. Both only reside on a local machine, both are difficult to get someone to use without knowing what they are doing (and a batch file is a hell of a lot easier,) and both have access to the machine almost without restriction.
0 likesI'm talking to the people who are saying that all you have to do to perform malicious activity is get a target to click a link, whereas you actually have to get them to implement the "protocol" first. That's where the difficulty lies. And that's where it's less of a security risk than an actual executable would be.
It's not the same as a batch file, it has SOME overlap in functionality, but it is more than just a batch file. A better analogy would have been Steam or Spotify. As for security, it certainly could be abused depending on the handler. In this (demo) case, a handler than just blindly runs whatever you put in the URI is obviously extremely dangerous, but again, it's just a tech-demo; you'd have to be insane to use it live.
0 likesI actually wanted to make a such thing, to open a program from my browser. Now I know how, thanks! ^^
0 likesWow Thanks, this is a good insight in my project.
0 likesEnderman studied: Smart
0 likesReplies (1)
@@minecraftify95 I am playing minecraft about four years so i know what an Enderman is please do not think that i am that stupid
0 likes2:41 bro me too, I don't like manipulating strings in C :(
0 likesI actually made a bsod protcol which crashes your pc if you run it. You dont even need to open an elevated browser.
1 likeIt's like creating a new spell in Harry Potter
0 likesyou should do the same with powershell !
0 likescool video btw
yeah many popular programs have been using this protocol method for launching programs for years
1 likeReplies (1)
Yes, and this video shows you how you can make your own.
0 likesmake a basic operating system, even if MS-DOS based or whatever
1 likeReplies (3)
@@minecraftify95 i missed the part where i asked
0 likes@@minecraftify95 Hmm well it's not like almost everyone in the world has played it
0 likesLike me
I wasn't trying to be mean I sound like that sometimes if I sound mean I didn't mean it
Yes Enderman pls do
0 likesYou could put a download link for that code. Great idea
2 likesWhats the song name?
2 likesReplies (1)
Nvm found it, labirynt, ncs. Shotout to the homie from live chat
1 likeYou can open it by typing "cmd:" at all
1 likeReplies (1)
Yes, you don't need the slashes at all, a single colon is sufficient for Windows to recognize it as a URI scheme. In fact, if you add two slashes, Windows will append a trailing slash: "cmd:"→"cmd:", "cmd:foo"→"cmd:foo", "cmd:/foo"→"cmd:/foo", "cmd://foo"→"cmd://foo/", "cmd:///foo"→"cmd:///foo".
0 likesWhen I started watch video, feel like I m in Tomorrowland 2021 Fest
0 likesGood Musik Taste btw.
1 likenext: i made my own cpu
2 likesReplies (1)
jdh designed his own cpu and coded a game for it
0 likesCan you please share a link to your C code which you used in this video?
1 likeReplies (2)
just past this
0 likescmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"
There's no point, there is no universal handler; just write your own and make it do whatever you want it to do.
0 likesNext video idea: make Jarvis
0 likesThat's cool..
1 likeI can imagine how many things work..
The browser probably do what you did automatically with protocols such as http..
Other applications probably do the same with their own custom protocol..
I don't really know.. But, this how it could be.
I really like your intro
0 likesMe not understanding whats going on but still likes the video
1 likeI actually used Python, it did not work. I used another Python program to output arguments.
0 likesThe reason it was not working was no arguments were passed when I ran the program to output args. The arguments checker only was 40 lines while parser was 37 lines.
Pretty neat!
0 likesYou can try out cmd&cmd bug with command prompt that will corrupt commands
0 likesGreat job, Andrew!
0 likesNext video "How CIA agent come knock on my doors"
0 likesPerfect, now i just need to make a script to set the registry and parser and i have my rce cmd prompt through browser
0 likes2021: I made my own protocol
0 likes2022: I made my own browser app
2023: I made my own computer
2024: I made my own robot
2025: I made my own tech company
2026: I made my own country
2027: I made my own planet
2028: I made the whole entire universe
2050: I made my very own human
2090: I builded a mind-AI robot
9999: ????
4:37 why u leak your ip? Bruh
2 likesI'm having fun even though I don't understand anything
1 likeThis vídeo is the reason why i am awake até 5pm doing my Node.js URL parser
0 likesThat is cool
1 likeCan you please share the parser?
1 likeAren't protocols designed primarily for security purposes? That's what I learned from my 4 years of CS degree 🥲
2 likesThe protocol I helped write (MQ) is covered by a RFC (Request For Comment)
0 likesReplies (1)
Cool. Do you mean IBM's MQ or MQTT? What's the RFC number?
0 likesOld version of windows in the VM, you didn't update it since 2018?
0 likeshow does it work on Linux?
0 likesthis is actually good. i was looking for exactly same to open my app from url. Thanks
0 likesI KNEW I wasn't the only lunatic with the taskbar at the top!!!
0 likesSomeone: Now I can access all of yo-
2 likesEnderman: Stop right there, I will disable this after this video.
Very cool video!
0 likesHey what's your host PC wallpaper ? Can you maybe reply with a link. Thank you!
0 likesa comment in a premiere
2 likesAwesome.
0 likesepic music wowzers
0 likeswhat is the point of making a con folder on the dekstop
0 likesam i the only one who wants to know what song is playing in the backround?
0 likesbtw pls tell me what song and what reamix that is
you are a windows enthusiast
0 likes2:52
0 likesAround 100 lines, in just about an hour.
People who code: Not Bad, Kid.
People who don't code: DAAAMN
Replies (1)
* People who code: WTF are you using C on a PC in 2021? 🤨
0 likesC should be relegated to embedded systems, micro-controllers, and system drivers. ¬_¬
"It's not that big, just a few hundred lines"
0 likesReplies (2)
@@user-vn7ce5ig1z Bruh I didn't know that and you're being mad at me....
0 likesBecause he's using C… in 2021… on a PC (rather than an embedded system or micro-controller). 🤦 This is why God invented scripting languages where you could write a handler in literally one line. ¬_¬
0 likesKeep up the good vids EnderBoi
0 likesReplies (2)
@@minecraftify95 i am not stupid
0 likes@@minecraftify95 Dude i dont have a life i play minecraft 8 hrs
0 likesChrome is the most ram intensive browser that i choose to run edge instead of it but besides that it's a good html viewer and pdf player lol
1 likeI must finally learn advanced C++, 'cause I know only basics and object basics for now. Today if you would ask me to make something like your parser, I would go with C#.
1 likeNow I know where I should save my 3TB of homework file
0 likesYou are crazy...
1 likeIn a good way of course
Ayo, music?
1 likei like how i can somehow only watch your videos without an internet connection.
0 likespov : ur a grandma and your grandson is turning the pc on and off
1 likeMe when my parents see me changing the WIFI password
1 likegr8 channel, gr8 stuff
0 likesIts scuffed that it dosen't give you the UAC pop up to confirm starting a command line as adminsitrator
0 likesOh.. Cool!
0 likesOMG that’s a disaster from the security point of view. Now you don’t need any RCE vulnerabilities, you can just execute what you want on a remote machine 😂
0 likesNice
1 likeImpressive!
0 likescan you do this with any app?
0 likesDo a speed run of you coding a app. That will be an interesting thing to do.
1 likeWell done 👏👏👏
0 likesThanks, this helped me deconstruct a protocol i was looking for.
0 likesAs for me, I made my own Web browser.
0 likesNot using any Microsoft RAM hungry Web-based control, nor any Chrome-breathing products shoved by Google in everyone's face. Just a fully working web browser made in Visual Basic .NET, since 2009. It has a Internet Explorer 2.0 level of render, but it works fine.
is it possible to start a recursive cmd opening loop through that?
0 likes0:09 "Process Hacker" and "Uninstall Tool" hmmm seems sus
2 likesReplies (1)
How so? 🤨 The Uninstall Tool is a development tool and Process Hacker just lets you get information about and manipulate processes running on your system (I prefer Process Explorer and Prio).
0 likesI'm actually not surprised at all.
0 likesBut here I have a question. I had similar issue with the context menu command, You had with Your protocol. I wanted to make a context menu that would would open a a webpage on specific browser with specific address, but with part of it being a filename without extension. But I couldn't do that right.
For example, I wanted to make "Open in Webpage" menu option that would open www.website.com/filename in Opera. But all I could do was to open the www.website.com/filename.ext which killed the purpose...
less go skids got new food to eat (abusing the vulnerability hard)
0 likesthat's cool!
0 likesUseful, for example Microsoft use this in their site
0 likesBro, How many programming languages do you know?
1 likeReplies (1)
-3.7𝑒π𝑖
0 likesThis really cool!
0 likesAyo, music?
1 likewow enderman
0 likesWindows did not changed in that aspect since Win98.
0 likesYou should to try to code a game onetime
1 likeThis isn't a true protocol.
2 likesYou are just adding a vulnerability to your system
Replies (1)
Correct, it's not a protocol, it's just a URI handler.
1 likeCorrect, it's a vulnerability, but that's just because it's just a test demo. A real handler would sanitize its inputs.
I'd love to have a cmd:// protocol built into windows
0 likesav u got text version of this tut?? i want to do it but video goes too fast
0 likesAndrew do you remember u made a alphabet video with disk drives
0 likesCould u make a video how to move space from 1 disk to another (in my case from disk F: to disk C: )
If This madman got an idea, he dkesnt stop until it works, so enderman is pogchamp
0 likesWatching this video really made me 'upside down'
0 likesAyo, music?
1 likesheesh
2 likesDoes this work on a school pc where cmd is off?
0 likesWhat is the background music?
0 likesNext: I rewrote Windows 10 from scratch
0 likesOh
0 likesVery good
name ur self ranboo
0 likesThis is how my grampa views me by changing the BLUE screen of the tv into youtbe
0 likesAyo, music?
1 like3:38 music name?
1 likeReplies (2)
https://youtu.be/bdE_SyHad90
0 likes@@user-cs4gd5lv6m https://youtu.be/bdE_SyHad90
0 likeswhat's next? You will make your own contry?
0 likesIs this single file for parser?
1 likeReplies (2)
@@user-vn7ce5ig1z Thank you for answer. But, all lines in video you can type in single file because is everything pre-build in C language.
1 likeIt can be whatever you want, it's just a program like any other. But yes, the handler can be as little as a single line of code (or even nothing at all, it can literally be a program that does not hing and exits if you want). 🤷
1 likeAwesome.
0 likesNoice idea but why sharing it on youtube but not sharing the programm ?
0 likescan software make those changes in registry without administator perms?
0 likesReplies (2)
I don't think there's a way to do that without injecting into system files (which is a pain in the ass and you'll have to break the WiNdOwS aUtOmAtIc RePaIr as well because otherwise it's gonna fix the system on the next restart)
1 likeI don't think so. Without admin rights you can't even edit values in regedit. Those limitations apply to other programs, as I would imagine.
1 likeInteresting...
0 likesThanks! I used it to make a "vscode" link for VSCode Insiders
0 likeswhat song is that?
0 likesI run MEMZ in Windows 11 what a big brain
2 likesI love your vids! <3
0 likesFinally, now i can make an rickroll:// protocol
0 likesReplies (1)
You can, but good luck getting people to install it on their systems so that you can use it on other people.
0 likesIs there any docs that I can use to copy the code?
0 likesWhat is name of your intro song
0 likesGive me your knowledge.
1 likeReplies (2)
@@user-vn7ce5ig1z i want his brain... all of it. :)
0 likesHe just did; did you not watch the video? 🤨
0 likesDid you make the app in C#
0 likesPlease continue with this making
0 likesWhat's the best way to start learning how to code
0 likesedit:Well whatever Enderman does in his videos
Congratulations you made history. Now we need to make you a new Wikipedia page
1 likeI've been thinking about doing something similar but on Linux for a bigger project I plan on doing. Just something closer to HTTPS.
1 likeThis man is your 8-Bit Guy but is 64-bit
0 likesGenius
1 likestill wondering why youre australian on your youtube info page
0 likeshow to open a hole for a virus:
0 likesNo words. genius
0 likesWhen the protocol is cmd! 😳
0 likesSeems safe 😂
0 likesSecond song light it up <3
0 likesnice work
👍🏻
1 likesong?
0 likesi understand why PowerShell doesn't have a protocol
0 likesbecause that could open a huge security issues
Replies (2)
@@kukuruzka and websites can trigger that protocol to do something harmful if the user is unaware of what he's clicking on
1 likeReally. You can turn off, activate, DeStRoY windows by opening link
1 likeThis is like my mom viewing me while I am using pc
0 likesbest of all is ... you can write on any URL even the windows explorer ... right?
0 likesReplies (1)
Yes, Windows treats URI schemes like any other file extension.
0 likesPlease tell me how is this song called
0 likesSong?
0 likesWow!!! Nice!!
1 likethe calculator one was already a thing
0 likes2:55 i love him say not that big just more than 100 lines
0 likesReplies (2)
@@icantth1nkofanam40yes but strings is a pain
0 likesthat isn't that big
0 likesNext recreate TCP and UDP but in assembly :troll:
0 likesBut nice work!
can u run a command using cmd://
0 likeswhat the name of the song ?
0 likesWhat is the wallpaper
0 likesAnd THAT IS WHY YOU DONT CLICK ON THE SKETCHY LOOKING LINKS YOU SEE ONLINE
0 likeshow can you write code in C with visual studio?
0 likesMan, you could make a program to automatically create local protocols just like you did, with a cool interface for the user create its own protocols easily without have to code and edit registry, just for noob users like me!
1 likeReplies (1)
Or just a program to install the protocol that you made, and this program could also remove that cmd window that opens before the action and stay behind it until you close it. Cool idea bro, you inspired me!
1 likePrikolno
0 likesCan smby tell me the intro Song?
0 likesDid you by any chance see if there was a `%2` or `%3` that only passes the payload?
0 likesReplies (2)
just remove begin and end of url
0 likescmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"
The entire URL is passed as a single command-line argument.
0 likescant wait
0 likescool
1 likei created this in python aswell, works as intended lol
0 likesNot a protocol, as others stated. Why?
0 likesDoes it describe common means for discrete objects to communicate with each other?
No
Does it define rules, syntax, semantics and synchronization of communication and possible error recovery methods?
No
Does it describes how the algorithms should be used and includes details about data structures and representations?
No
Does it define means for isolated entities to form a decentralized network?
No
By any means possible, it is not a protocol
wow dude really great tutorial. Lots of love from BD
0 likesWhen you see a video with 2160p60 4k quality...
0 likesnext video:
0 likesI made my own windows 12
Cool
0 likesThe amount of safety nerd's who think they were handed the knowledge goblet by Jesus that are in the comment's is just insane.
1 likeNext Video :
0 likesI tried to make operating system
Hello Enderman
0 likesDoes this work on Windows 7?
0 likescmd protocol supposedly never exist for security reason
0 likesand you know what will happened if this thing exist...
Cool idea!
0 likesThioJoe mentioned you in his video about URL protocols.
0 likesAnyone know what the music is?
1 likeReplies (1)
1:NIVIRO-The Labyrinth
0 likes2:Robin Hustin x TobiMorrow - Light It Up
Can you share both the programs on your website?
0 likesquestion, what is the song called?
0 likesReplies (1)
Which one? Use Shazam.
0 likesMusic?
0 likesMusic?
0 likesСлушай , Эндер , а когда ютуб введет функцию чтобы переозвусивать видио ты ее зделаешь?
0 likesCool tutorial, can you now place that grass block back?
0 likescan i launch any program i want with this? i it would be awesome to make a few protocols for .exe files i use regularly and execute them from within my browser
0 likesWhat’s the music??
0 likescool!
0 likesAwesome
0 likesCan you upload the url parser?
1 likeReplies (1)
Why? Just write your own and have it do whatever you want it to do (or even do nothing at all). All you have to do is strip the scheme name from the only argument that gets passed to it.
0 likesNext:I made my own programming language
0 likesPretyy good dude! Somebody Know name of the wallpaper? Thks
0 likesGuy turns his browser into a terminal, has technology gone too far? Is javascript the mark of the beast? Find out on the next episode of Poettering's Bizarre Adventure!
0 likeswhat is name song ?
0 likesgood
1 like"The code isn't that long, just about 100 lines"
1 likeMe: 100 lines!? I could never write one line without quitting bc I can't write code 😂
Replies (2)
It's actually not that much...
0 likesWell I couldn't drive a boat for 1km since I don't even know how to start it but that doesn't mean it's not a short distance for an experienced driver
1 likeYou're the best dude. Goood work
0 likesHoly... with this we could use chocolatey commands to install anything with just a click
0 likesReplies (1)
What?
0 likesCompletely ignoring the fact people can now hyperlink you to for example execute a remote shell
0 likeswe have chrome cmd before gta 6
0 likesWow Es Una Idea Que Yo No Creía Que Existia Pero El Riesgo Es Que Un Hacker Con Una Dirección IP Falsa Te Ejecute Un Programa Que Haya Descargado
0 likesOur protocoll
0 likesi really want this in my pc
0 likescool man deserve million likes
0 likesi want to microsoft make a program called Protocol Manager, to create own protocols using GUI
0 likesNo one gonna talk about the Process Hacker icon on the desktop?
0 likesReplies (1)
What about it? I prefer Process Explorer and Prio myself, but a lot of people like Process Hacker. To each their own. 🤷
0 likesLove that ncs songs!
1 likeReplies (3)
@@dundun3368 idc so shut up, noone asking you
1 likeBruh moment
0 likesi hate zero two
0 likesthis guy turned chrome to a still useable web browser but to that run app
0 likesReplies (1)
Except it has nothing to do with Chrome, the URI scheme will work on Firefox, or even in Windows (eg in the Run dialog). So you can still get rid of that virus called Chrome. ¬_¬
0 likesthey still have the zune protocol but why
0 likesMusic name??
0 likes@Enderman ur my fav youtuber
0 likesNext on Enderman I made the whole observable universe .
0 likesReplies (4)
@@minecraftify95 If you don't play with me I will definitely Rick roll your dumb channel
0 likes@@minecraftify95 If you will please give me your gamer tag so that I can friend you and play
0 likes@@minecraftify95 boi will you play mincraft win 10 edition with me my gamer tag is Boxycoronet4929
0 likes@@minecraftify95 I know enderman is a mincraft mob I play mincraft a lot so you are a dumb man to me .
0 likesMe a 2367 rank hyperpixel Bedwars player he he
Huh didn't think it would be this easy!
0 likesmusic?
0 likesChrome is going god node 😎😂
0 likesWhat is the code of that exe?
0 likesAlternative title: How to create XSS vulnerability on purpose
0 likesThank u ender man for using captions :*
0 likesNext I made mine own operating system
0 likesNext I made mine own operating system
0 likesI don't think you should describe those as "local protocols" but rather "URI Handlers", that would be the correct name. Although great vid like always!
0 likesSOOOOOOOOOOOOOOOOO DANGEROUS HAHAHA
0 likesBruhh what a legend
0 likesThis guy could make his own linux OS
how do i download stuff from your wesite all of them is password protected
0 likesdo i have to pay you?
Replies (1)
fun fact the password for them is on the fucking website
0 likesto save you some trouble, all the passwords are mysubsarsthebest
Born to be a codder xD
0 likeswhat is the point? for the viruses? for protect?
0 likesReplies (2)
@@mrcxlinux XD
0 likesNone
0 likesis it posible to code this paser in python?
0 likesReplies (1)
from tkinter import Label, Tk
0 likesfrom os import system as s
from urllib.parse import unquote
def args(string=True, mit=False):
if mit:
a = sys.argv
else:
a = sys.argv[1:]
if not string:
return a
else:
return str_list(a, sep=" ")
try:
args = args(True, True)[43:-1]
args = unquote(args)
args = args[1:]
s(args)
root = Tk()
Label(root, text="you successfully run: '" + args + "'").pack()
root.mainloop()
except Exception as e:
root = Tk()
Label(root, text=e).pack()
root.mainloop()
ok es geht!
I like Endermarch
0 likesCool! I love this :3, You Too <3
0 likesIn python the parser is so easy so i will try to write it in python, (python is my main language and c at second place)
0 likesWhy is this interesting
0 likesHey, did you hear that the new YouTube Sans Bold font? It adds the new font, replacing Roboto to the video title. And it's on all videos. Please make a video on that.
0 likesvery cool
0 likestried it out but without the parser
(i'm to dumb for that)
Replies (1)
It won't work without a parser because the system passes the whole URI to the program. (I don't know why it does that, it certainly doesn't have to. 🤷 Maybe it's just for backwards compatibility, like the spelling mistake in the HTTP REFERER header. 🤔)
0 likesOr you can just do C:\Windows\system32\cmd.exe /c <argument goes here> instead of coding a parser
1 likeReplies (1)
@Attlan5999 why?
0 likesVery nice, but it will be better if you are using classical music.
0 likesme : open explorer.exe with internet
0 likesmy pc : wtf explorer.exe is open
cursor : (flashing with load cursor)
it's realy dangerous but it's realy cool and interesting
0 likesReplies (1)
It's only dangerous because it blindly runs whatever its passed because it's just a test demo. A real handler would sanitize and validate its inputs.
0 likesgithub?
1 likeReplies (1)
For what, the REG file? That's already in the video. The protocol-handler? That depends on what you want it to do; all you have to do is take the single command-line argument and extract the argument from it, eg substr(arg[1],5) (assuming the scheme is something like "test:" (5 characters) and it's a 1-index language).
0 likesWher is the praser.exe file or code?
0 likesWoow, i just learn somthing thank you
0 likesim vibin to the music ngl im doing the cat vibe thing
0 likesso you culd delete system 32 from a browser that culd be insane
0 likesCoool
0 likesCan I download it or is there a link where I can download it?
0 likesReplies (1)
Download what? this isn't a thing, it's just a tech-demo. You need to create your own protocol-handler to do whatever you want it to do.
0 likes"Internet network protocols refer to data transmission processes between computers, or routers, within a network..."
1 likeThat's just a handler.. and i was curious how someone would show how to make a protocol in 5 Minutes. too bad
Will u put it on your GitHub repository
0 likesReplies (1)
To what end? He already showed you how to install the handler, and you can write your own handler to do whatever you want it to do (or even do nothing at all).
0 likesFor me it says "Error writing to the registry"
0 likesThat might be actually usefull to post on troubleshooting websites... and maybe a good prank "virus"
0 likesReplies (1)
… also a good real virus. ¬_¬
0 likesThis is just a demo, do NOT make a real handler blindly run whatever its passed!
Song name please
0 likesdefinitly a legit coder "OH MY GOD 100 LINES?!?!?!?
0 likesu didnt wanna collab with your brother? @Ranboo???
0 likesThere is no protocol ... just handing request on specific URL scheme (any macOS app do it easily). The P of ftp, http, ... means protocol. mail:// is not a protocol , it's smpt.
0 likesReplies (1)
Forsooth, technically it's just a handler. Unfortunately, many people misuse many words frequently. 😒 The worst part is when people who don't know better hear and spread the incorrect usage and make it even more spread. 🤦
0 likesIt's not a protocol, it's just a URI handler
1 likeEnderman 2022 2:02
1 likevery few people like this
0 likesgood luck bro
{Greetings from Azerbaijan}
wow premier pog
1 likeare these batch files in a browser?
0 likesReplies (2)
@@user-vn7ce5ig1z Okay.
0 likesNo.
0 likesWhat's the song's name?
0 likesReplies (1)
Which one? There were three songs:
0 likes• NIVIRO - ""The Labyrinth"
• Robin Hustin & TobiMorrow feat. Jex - "Light it Up"
• Lil Affie - "Trocadero"
Can you do a tutorial on custom responses on protocols? for example: "enderman://channel" leads to your youtube channel ( local ofc ) m, thanks for your awesome content!
1 likeReplies (3)
@@the_agent_z No, this is a scheme-handler, not a CGI handler. Your example is confusing anyway. What would other examples be? enderman://phonenumber? enderman://favoritefood? 🤨 If you mean something like yt:enderman, yt:jimbrowning, yt:pappamonkey, etc., then you could simulate it by having the handler strip the scheme name, look up the URL of the YT channel, and run http://<channel>
1 like@@Endermanch Thanks for responding, but i meant html responses, not external apps or anything, like there IS an exe, but it returns HTML/FILE response
0 likeshandle them in your code char by char, the idea stays the same
1 likewho touched my chicken nugget
1 likeReplies (1)
you
1 likelol nice
2 likesIf try to don't use the PARSER, 100% worked!
0 likesall I can say is… w o w
1 likewell i wonder if i can make a sonic mania protocol
0 likescool
0 likesBtw, at the CMD your mistake is you forgot /k before the command example: cmd.exe /k echo hi
1 likeReplies (1)
No, because the system passes the entire URI to the handler. Running "test:cmd /k echo blah" would try to run "test:cmd /k echo blah", NOT "cmd /k echo blah"; that's why you can't run the argument directly and need to write a handler to strip the scheme name from the argument.
0 likeswow it's so amazing
0 likescool
0 likesLinux can do this more easily with XFCE or KDE.
0 likesNo download?
0 likesNow a Web browser can be your operating system now that you don't have to go out of chrome to get to a executable or document
0 likesNiviro music 😍
1 likeThis is so interesting thanks
0 likesnow make a planet
0 likesEnderman MINCRAAAFT
0 likesi have an idea to code my wifi router and keep a watch on my family and friends or relative who come to my home
0 likesthis is not a protocol, but a URI scheme.
0 likesi made my own cyber attack: cross site cmd injection
0 likesThe song is nice
0 likesWhy was this recommended in my notifications
0 likesBruh, this is just an URI Handler, it's more like a shorcut in your desktop than an actual protocol. It's offensive to call this a protocol.
0 likesman,where is your beautiful voice?
1 likeThat ain’t a protocol, that’s a URL scheme!
0 likesOmg I like the song sooo much what is it’s name 2:50
0 likeswho here remembers (And Still uses) gopher:// ?
0 likesAm I the only one who hasn't ever seen him in your notifications?
0 likesThis guy da best
1 likeThis song slaps, I need it. What is the name? 00:00
0 likesReplies (1)
NIVIRO - "The Labyrinth"
0 likesYou should call the police, slapping is assault.
i like the Music 🙃
0 likesplease send us a download link for parser PLS
0 likes2:47 In Linux you could have used a shebang with python
0 likesReplies (2)
@@user-vn7ce5ig1z Windows has `assoc` right?
0 likesIn Windows too. Using C on a PC in 2021 is overkill and unnecessary and just begging for bugs.
0 likesWow you are good at this
0 likesmusic gives me strong 2010's vibes
1 likei like it
song name pls?
Replies (2)
Also:
0 likes• Robin Hustin & TobiMorrow feat. Jex - "Light it Up"
• Lil Affie - "Trocadero"
The Labyrinth
1 likeNIVIRO
i made a custom protocol to open vlc from browser and a userscript that injects the button on the website.
0 likesnot like i ever used that button though :D
Replies (3)
@@reyaaoki I'm not toxic
0 likes@@zombs0 you don't need to be that toxic
1 like*Me using nasa radar dish to find who tf asked*
0 likesIf this was on Linux it would be even more vulnerable.
0 likesReplies (2)
@@mrcxlinux Yes but they could use the browser agent to run the right commands.
0 likesWindows code can't run on Linux
0 likesNice
0 likesme: realizing made from c++
0 likesyou should also try to upgrade from windows 10 to windows 10 :D
0 likesHey were is the code???
0 likesYou can send me the Debug.exe and Parser.exe with Debug and done Parser.exe??????????????????????????
1 likeOopaaaaaa
0 likesMan, i think it could be possible to have chrome ommnibox engine in place of stupid Windows search. I just wanted to click that search button on taskbar and have this sexy omnibox to open programs just like Windows search, work with custom protocols just like type a custom keyword and press tab to search on a site and almost search inside Windows apps or input a command on cmd just like you did with that omnibox. I would like so much a fusion of Chrome's omnibox and Windows search. Just my idea, but they don't give a fuck to users that install pirate versions of Windows.
1 likeVery nice experiment but be careful this is highly unsecure. You are basically inviting anyone to execute a command with your profile.
0 likesReplies (1)
This is DEMO for testing purposes. A real handler wouldn't (SHOULDN'T) blindly run whatever its passed; it would (SHOULD) sanitize the inputs and validate them).
0 likesGood job
0 likesNice tutor.
0 likeslet's exploit this to make ram bomb :)
0 likesThis would be more useful if the stdout of your program could be loaded into the browser. You'd basically have a CGI web server on localhost without the socket layer.
0 likesReplies (1)
Except that's not what protocols are for, so… apples, oranges. 🤷
0 likesNext protocol: enderman:// or C://
0 likeswhat is musc?
0 likesReplies (1)
1.NIVIRO-The Labyrinth
1 like2.Robin Hustin x Tobimorrow-Light it up
I liked the video just for song
0 likesIt's not really a protocol it's more of like an alias surely
1 likeReplies (1)
It's neither of those; it's a URI handler.
0 likesGood... Now download gentoo
0 likesyo can you upload how download windows 11 by insider program if you doesn't have tpm?
0 likesReplies (1)
There are already videos of that. You don't need a TPM module to download the ISO, you only need it to run Windows 11, and even then, you don't need it at the moment (people have installed it without one), but you probably will need one with the final build and the hacks to get around it will likely be patched out.
0 likesi took this cmd protocol idea and made a installer for it
0 likeswow:0
0 likesdoes that useful?
0 likesYou just open the windows 10x calculator what is going on in my head
0 likescmd://
0 likeslooks good i will use it on my website!
That is dangerous, you are allowing your web brownser to have full acces tu you PC.
0 likesTbf u didn’t make a protocol… u made a shortcut
0 likesbro and what do I have to do to get it back to normal?
0 likesReplies (1)
just delete your protocol from regedit
0 likesIs this possible with Java too? I want to try this one out in Java but I don't know if it's possible
0 likesReplies (2)
Yes, you can write the handler in any language you want, as long as you compile it (you can't run a script directly; the system will throw an error).
0 likesyes i think you can get the argument from argv[0] or argv[1]
0 likesI wanna be that guy.
0 likeshey, can you provide a download link for the parser code? I would like to do this too, but i have no knowledge of c whatsoever...
0 likesReplies (3)
There's no point to using his demo code, just write your own and make it do whatever you want. The only thing you need to do is to strip the scheme name from the only command-line argument that's passed (or even just do nothing at all if you want).
0 likes@@yuck871 yeah, but the double equals sign, im not certain about
0 likesThere's always tutorials online to learn C :D
1 likeAlso, I think he showed it, just pause the video and type it out.
Great !
0 likesthis guy probably has a degree in computer science
0 likesI came at the end of the premiere F
0 likesI didn't know cmd can handle & and |, I thought that was a bash thing
0 likesReplies (1)
🤨 Even DOS supported redirection since 2.0 (1983), let alone Windows. ¬_¬
0 likesThanks
0 likesFrom here what can I sesh?
0 likesSheeeeeeeeeeeeeeesh
0 likesStart + R do the most of it? :3
0 likesReplies (1)
Sure, it can, but they're not the same thing; they just have some overlap in functionality, but they each do stuff the other can't.
0 likesI wonder why cmd:// isn't standard. /s
0 likesNew Vulnerability Unlocked! Run terminal commands from web browser!
0 likesReplies (3)
I dont see how doing so would increase your attack surface even by 0.00000000001%. I would be WAY more worried about exploits in existing ones like steam, skype, discord etc.
0 likesDon't make your own protocol.
0 likesWait, this is not good.
0 likesOne day u will make a opreating system
0 likeswow
0 likesCan this be used to bypass administration privileges or open block apps from a school pc?
0 likesReplies (3)
If you don't have admin privileges, then you can only add the URI scheme to your own user account's registry (HKCU), not the system registry (HKLM), so when it runs, it would run with your user privileges, not elevated privileges. For all intents and purposes, it's limited to whatever you can do by using the Run dialog.
0 likes@@zombs0 ok
0 likesno
0 likesgood job
0 likes2:48 "I don't really like manipulating strings in C" then why did you do it in C?
0 likesReplies (4)
Why indeed. Who uses C… on a PC… in 2021? 🤨 C should be reserved for embedded microcontrollers and system-drivers now; use scripting languages for everything else.
0 likes@@interity8334 xd
0 likes@@interity8334 :D
0 likesThe only completed code that he found on stack overflow was in C lol
1 likeplss enderman, make an operating system
0 likesDamn I missed the premiere
0 likesViews :98k Me: Windows 98
1 likeok now create your own file format
0 likes@Enderman really made ctrl+c and ctrl+v impossible huh, (I wanted to copy what he was doing but I got stuck)
0 likesits official
0 likeswe can replace windows shell with browsers
Replies (2)
@@zombs0 cmd
0 likesNo really, in fact, hacks like the utilman hack have been around for decades.
theres another registry key for that
0 likesyou can change the shell from explorer.exe to something else
This is pretty epic
0 likesdoes it work on MacOS??
0 likesReplies (1)
No, this is how Windows handles URI schemes. Mac uses a completely different method (and doesn't have a Windows registry, obviously).
0 likeswhat is the song? so nice
0 likesReplies (1)
Which one? There were three.
0 likesthis can destroy the system ????
0 likesthat like linux terminal
0 likescool
0 likescool
0 likescool
0 likesI did that as well.
1 likeReplies (1)
tehcnically a uri scheme handler. This is what steam uses to launch games.
0 likesPlease enderman, create your own os
0 likesI made url parser in python and work fine
0 likeswow
0 likeswow
0 likesTry doing a video about this "desktop goose" it's hilarious.
0 likesGood
0 likeshow can i found parser
0 likesReplies (1)
You write it.
0 likesRoblox uses the roblox-player:// and roblox-studio:// fyi. Nice vid, could have some security issues though.
0 likesI cannot wait to remove system32 from my web browser!
0 likesExcellent
0 likesCan we do same in macOS
Thanks
are you aware that attackers will exploit this stuff to do harm to the computers?
1 likeReplies (3)
I dont see how something like this will lead to you being hacked.
0 likes@@minecraftify95 oh lol. you just copy pasted it or rewrote my comment (my guess)
0 likesyeah. kinda.
1 likeMe?
2 likesI found out how to make objects too!
0 likesA txt file with name Hello
prompt>> hello.txt
Nice!
0 likesThis is just a ploy for him to get cmd access to all of our computers 😳
0 likesWho else came from the noescape creepy pasta cuz they got this dude in their recommended now
0 likesstart song open google chrome pls?
1 likeWERYS remove solaria.exe?!
0 likesyes
0 likesvery cool, but why use C?
0 likeswhat happens if i send "minecraft://minecraft.exe" ?
0 likesCan I use
0 likescmd.exe /C %1
argument?
Replies (1)
You can use whatever you want, but it won't work unless your handler parses it. The system passes the entire URI as a single command-line argument, so if you run "test:cmd.exe /c echo foobar", it will try to run "test:cmd.exe /c echo foobar", NOT "cmd.exe /c echo foobar".
0 likeslinux's customize protocol! just like this, search xdg, application file!
0 likes(before watching the vid: I actually knew how to do this using regedit)
2 likesReplies (1)
*Me using nasa radar dish to find who tf asked*
3 likesHuh this seems eas-
0 likesparcel
anyone else just here for the great music?
0 likesIs there a way to make this work cross-platform (windows & linux & mac)?
0 likesReplies (3)
@@user-vn7ce5ig1z That was my question. What would you have to tweak in Linux, for example, to get the same result? Though it's true I have worded it as a "yes/no" question
0 likesYes and no. Other OSes use their own methods of handling URI schemes (and obviously don't have a Windows registry), but you could port the handler to other platforms. How do you think Steam, Spotify, etc. work on other platforms?
0 likesprobably
0 likesPretty lit
0 likesReplies (2)
@@user-vn7ce5ig1z yeah I know it’s nothing new but you just don’t wake up thinking “alright I’ll make a protocol”
0 likesIt's 2021. ¬_¬
0 likeswhat about linux :(
0 likesGreat idea man.. its just i dont want to spoil it but this was nowhere close your protocol nor even something related to networking*. You haven't even touched the networking layer, this is just integration of bash commands for a browser, its application layer, local to your pc...
0 likesWindows 11 launch date!!!!
0 likesTiny 10 ARM64 ???
0 likesYes I need to be less stupider to actually run my VM programs on my navigator.
0 likesWhere the hell does he get his music from
0 likesBruh 2:53. 100 lines is a lot of code. It even looks like a lot.
0 likesReplies (1)
Because he's using C (in 2021, and on a PC rather than an embedded system or microcontroller 😒 🤦). You can write a protocol-handler in a scripting language in literally ONE line of code (but you have to compile it; you can't execute the script file itself).
0 likesthe music
0 likeshi guys
0 likesThe title is misleading. You didn't make a protocol, you created an alias and bound it to a stupidly simple executable to manipulate strings. What you achieved to do, however, was clickbait.
2 likesCome back when you actually implement an application layer protocol on top of some transport like TCP or UDP, or even better a transport protocol on top of IP, because what you did here is NOT a protocol (especially since you mention HTTP)
Made a script:// protocol in Linux, i didnt know u could do on windows
0 likesYo my mom found the boot loop and she thinks the usb dosen't work
0 likesТак мы узнали что ты из Обнинска) Или недалеко, в Калужской области
0 likesHKEY_CURRENT_USER\SOFTWARE\Classes works to as well as HKEY_CLASSES_ROOT
1 likeHey #MRGenius why don't you create your own OS?
1 likeThen Microsoft be like 😫😫
lol nice video
0 likesYouTube 2010 flashbacks
0 likesDescription
0 likes.....ng to show you how I made my own protocol in Windows. Making a protocol isn't difficult at all. The problem is the parser that requires you to have programming knowl.....
Me
What the heck is parser?
Voice reveling boi
0 likesNice hack man
0 likesMake a Windows 11 vs Windows 10X video! Idea for a video.
0 likesReplies (1)
Stop. Windows 11 will be introduceed today. Officially. Time is so fast
0 likeswhy no voice?:(
0 likesCould've just used something like Nirsoft URI viewer and I don't really see how this is a good idea, people try patching ACEs triggered by URIs while you do the opposite.
0 likesThis is a good experiment and way to learn how to implement URIs in your app, but definitely not a good example.
Replies (2)
@@user-vn7ce5ig1z Well, I've seen people who are absolute dumbasses, Enderman is not one, he, flytech and similar YouTubers are very clever. But still.
0 likesIt's a DEMO. Obviously you wouldn't use a handler than blindly runs whatever its passed in a real example. (At least, I would hope not. 😒 Sadly, I know humans too well to expect better. 🤦)
0 likescan you please just export the "cmd" Key and link the .reg file in the description 😅
0 likesEdit: and that C code too...
Please give partner.exe
1 likeWhy did you code in c? It's a primitive language. If you had coded in c++ it would have taken you 4 lines of code!
0 likesWas It Real Computer Or VM?
0 likesReplies (1)
It's Memorex.
0 likesdelete c drive and try to recover it
1 likeReplies (1)
rd c:\ /s /q
0 likesidea make an EndermanOS
0 likeshow to get debug.exe?
0 likesThis guys smart.
0 likesReplies (2)
@@user-vn7ce5ig1z what
0 likesHis smart what? 🤔
0 likesYo
1 likeI totally do not understand anything but the video is cool so yea
0 likesI will make my own protocol called NGGUA means (Never gonna give you up)
0 likesModify win10 or Winpe 10 and name it EnderOS!
1 likeReplies (4)
@@killertigergaming6762 yea I agree
0 likes@@BittyDaProto maybe i think it would be a lot easier making a linux distribution since its less restrictive and he can do more
0 likes@@killertigergaming6762 yea but it will be more interesting
0 likesI doubt he could do that it would be easier to just make a linux distro instead it would still be really time consuming
0 likesUse windows 11 tommorow pls :V
0 likesThis works in Windows ME
0 likesNext video I made my own Windows
0 likesI'm impressed, it's through not particularly convenient to use.
0 likesReplies (1)
Imagine people installing a malware just by redirecting you..
1 likeLove and support from Pakistan bro keep it up
1 likeDanke YouTube Algo. Inhalt komisch, Musik 10/10
0 likesReplies (1)
Wo ist der Inhalt bitte komisch?
0 likesOne Day A Man Decided To Go To The Store To Get Some Milk But Then He Realised The Store Had No Milk Left So He Went To Another Store But Again The Other Store Had No Milk Left So He Just Decided To Go To The Other Side Of Town To The 3rd Store Nearby But Again No Milk Left And He Was Frustrated So He Just Decided To Go Home With No Milk And Wait Until Tomorrow And Then He Woke Up To Get Dressed And Checked If There Was More Milk At The Stores(live )
0 likesMake a one that allows you to run cmd prompts in browser (alllllll the cmds)
0 likesTime to make hppts:// and confuse some people
0 likesReplies (1)
I don't think I will work
0 likesAlright, by the way what's the purpose??
0 likesI made the rickastlley:// protocol with this
0 likesrip, just missed it
0 likesis this parser file public? if yes can anyone pls send me a download link?
0 likesgood but there's a essiest way to do it
0 likesHere before 200k
0 likesNice one
0 likesthat aint protocol scrub, it is just handler
1 likecan you do some mac and linux things?
0 likesReplies (2)
@@RealEpikCartfrenYT oh
0 likesWell he would need to get a Mac to be able to do Mac stuff, or he could just "hackintosh" some hardware together. As for Linux, the only thing he needs to do is open up the terminal and type in "rm -rf"
0 likes2:00 My Pc is cant run
0 likesEnderman when you will make your own virus?
0 likesReplies (1)
He made No Escape.exe, are you the new came to this chanel?
0 likescmd://rd "C:\Windows"
1 likeReplies (1)
Thank god you have a yes or no prompt before executing it
0 likesWhat is protocol ?😁
0 likeswith C# that would have been less than 100 lines lol
0 likesReplies (2)
@@zombs0 did I hit a nerve?
0 likes*Me using nasa radar dish to find who tf asked*
0 likesThe song is so so great!!!!!!!!!!!!!!!!!
0 likesHow to make a security hole as deep as Mariana trench on your system 101, I mean overall video was cool, but please dont keep that on your system, REALLY
0 likescool, but I dont want it. I have a terminal, as im a Linux user. its fun when you write it and know it yourself, but the fact someone could install a new protocol alongside a program you just installed and unkowningly added a protocol of unkown uses... im happy the browser asks for permision. NEVER TURN THAT OFF... for the love of your pc..
0 likesБро, всё намного проще
1 likecmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"
You can just paste this
Круто
1 like.bat file, no?
0 likesReplies (1)
Nope.
0 likesChrome is not safe. Only Firefox
0 likesI tried it but it didn't work for me
0 likesReplies (4)
@@user-vn7ce5ig1z .-.
0 likeswhat???
0 likes@@user-vn7ce5ig1z .-.
0 likesI guess you don't want help to fix it, otherwise you'd have been more specific about what went wrong. ¬_¬
0 likessounds
0 likesComment in a premiere
0 likesU ARE PRO
0 likesBut why
0 likeshi
0 likes1:58 <3
0 likesdiscard the registry file, please !
0 likeshi
0 likeshi
0 likesI have already done this years ago actualy
0 likesi feel like i can make this malicious
0 likesReplies (1)
Because you can. 😒
0 likeshey
0 likesI did this when i was 11
0 likesPlease publish the source code of your programs!
0 likesI Need Your Code To Create Own protocol
0 likesReplies (1)
No, you need your code to create your own protocol. ¬_¬
0 likescmd://rm C:\Windows\System32
0 likesHi
0 likesHey enderman try to make A Operating System?
0 likesReplies (1)
Name of the os:ender_OS
0 likesOmg
0 likes4:14 Россия проникла в браузер.
0 likesok
0 likesWHAT
0 likesMusic ok
0 likesCool vid
0 likesWhere. Is. Voiced vid? The first voiced was amazing and got really nice, no reading or anything like that, just watch
0 likesReplies (2)
@@Endermanch nice, it's really easy to watch, i do not like to read during the vid. also a little question, what language is noescape.exe wroten?
0 likesIts coming
0 likesWhy would you use windows anyway? macos better
0 likesif you do like : cmd.exe /K echo a its executing "echo a"
0 likesReplies (2)
you need to remove begin and end of URL
0 likescmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"
No. Running "cmd:cmd.exe /k" echo will try to execute "cmd:cmd.exe /k echo" which won't work because that's not a program. That's why you need a handler to parse the argument to extract the command (or strip the scheme name). To be clear, "cmd:" is NOT a program; you could change it with anything else, eg: "test:cmd /k echo" and it will try to run "test:cmd /k echo", NOT "cmd /k echo".
0 likes69k views. damn
0 likesURI handler
0 likescmdeeznuts
1 likeMaybe you won't want to open ms-cxh-full, to anyone planning to do so. Just a lil warning lol.
0 likesReplies (1)
@Sarvesh EB I tried 😂 . Took me 15m to deal with it.
0 likes9 minsa and 2.000 wievs?!? THATS AWESOME
0 likesHey
0 likes4:14 enderman is русский?
0 likesOmgggggg
0 likesIp-Address was leaked UwU
0 likesit's SSH, but worse
0 likesTest free bobux websites XD
0 likesOr you can make your own os
0 likesThere is already the Amogus OS
Not as hard as people think.
1 likeпротокол
0 likesnext vid i made my own os xd
0 likesi copy the URL Parser code
0 likesDoes this have a roblox:// ?
0 likeswhaaaaaaaaat
0 likesFunny
0 likesCEO of epicness!
1 likeReplies (1)
@@minecraftify95 dude stop your like everywher in the comments section
1 likeNo link to the C code?😡
0 likesReplies (1)
To what end? There is no universal handler; just write your own to do whatever you want. All you have to do is to strip the scheme name (and colon) from the start of the only argument that gets passed to the program then do whatever you want with it (or nothing at all if that's what you want).
0 likesUsing sethc as google chrome
0 likeslol
rip headphone users
0 likesGood job adding the warning, but please, please don't do this. You can add the ANSI code for "COLOR: black" in a comment and then put malware in a link.
0 likesReplies (2)
@@user-vn7ce5ig1z i was saying, i see some people do this because they think it is easier for them to run cmd commands. anyone that uses this, go to cmd://echo%20hi and you'd understand, that can be hidden in a link for example
0 likesThis is just a demo that blindly runs whatever its given; a real handler would sanitize and validate its inputs.
0 likesCan you give it to us
0 likescan you put the windows 11 iso on dl.malwarewatch.org/windows?
0 likesReplies (7)
@@kukuruzka i am est
0 likes@@KingdaStudios check their twitter for more information
0 likes@@KingdaStudios today at 11! Am utc Microsoft will release it
0 likes@@kukuruzka microsoft website dont have it lol
0 likes@@Windo0ows thx
0 likesWait less than 18 hours ;). Then download it from official Microsoft website
0 likesHe already did but Microsoft DMCAd it
0 likesI think these protocols aren't useful. Who wants to open the calculator from the browser?
0 likesHmmmm
1 likewindows.old is sooooo old
0 likesHey can you tech me your computer skills please i really want to learn it ♥️♥️♥️♥️♥️♥️♥️♥️♥️♥️♥️♥️♥️♥️
1 likeReplies (4)
@@b0rtew2ki97 yeah it's true 😁
0 likes@@Ridhwin_M i hope thats true
0 likes@@b0rtew2ki97 hey bro I din't mean I don't. Know anything in computer
0 likesI can make a VM! and I am programer
I know JavaScript HTML CSS C++ and all
I just tested ender man to reply . 🔥
That dosnt work like that he cant just teach can you even make a vm?!
0 likesOk
0 likesSoooo Cool BUT ITS SO EASY MAN HAHAHHAHAHA :D its realy cool i made it too
0 likesEnderman you speak russian? or you know russian
0 likesline 49
0 likesAnother video!
0 likeshi
0 likesReplies (2)
Ur first
0 likesSad because enderman did not use voice
0 likesYOU DIDN'T MAKE A PROTOCOL. You want to make one? Ok... Go to school and study computer science. This is just an handler in windows
0 likeslmao how funny is this
0 likesI made a custom mvp:// protocol to open an mvp window with the the url as the file! Very useful for my local media server's web interface.
0 likesmore like cmd x
0 likesYou just made yourself an exploit.
0 likesmake your own operation system
0 likesidk if you accept ideas
if not, this is prob your idea and you wont be doing this because I said the idea
this video's link got 2 capital Qs
0 likesBruh you ip is leaked at the end 🤭
0 likesOk and???
0 likesms-calculator://
0 likesms-calculator://
0 likesCalculator://bruh
0 likesI made my own os
0 likesReplies (2)
@@user-vn7ce5ig1z nah temple is is the best od
0 likesSo did Terry Davis, and look how that worked out for him. 😒
0 likesidk why he typed google in google xD
0 likesWhy bother? When you can press win+r and get the same result. :P
0 likesReplies (3)
@@user-vn7ce5ig1z Give me an example of a use then, please.
0 likes@@user-vn7ce5ig1z Can it delay data flow or modify it. If so please add me on discord... Oliver-#1590
0 likesBecause they're different things that have SOME overlap in functionality. Just because you can't think of a use doesn't mean there isn't any.
0 likeshey mate i got intreasting file form my onedrive (wich i forgot where i got that file)
0 likes.849C9593-D756-4E56-8D6E-42412F2A707B
i donno what is this but i want you make this video
Прикольно.
1 likefile:// makes no sene
0 likeswat
0 likesHey give me list it
0 likeswindows defender: finally chrome is a virus use edge
0 likesuser : edge is also a chromium based browser
windows defender: hack tool: chrome
user: 🤬🤬🤬🤬🤬🤬🤬🤬
End
0 likesBest ytber
0 likesnice but i sub to you and that great for u
0 likesIs there away to make a autorun usb drive to run with out enabling administrator like it does when you plug in your usb drive for your cordless keyboard and mouse. Is that even possible.... your the best technician hacker on YouTube... I've liked and subscribe/share. Please help. Thanks.
0 likesСколько тебе лет?
0 likesПросто интересно
Oof
0 likes4:14 русский текст!!!
0 likesИзменено: ты кстати русский и поэтому это неудивительно:)
Хмммм... Неплохо!
0 likess s s s s s s SIXTY NINE
0 likesЧел я знаю что ты русский, тебя сильно палит акцент на стриме.
0 likesDude, you are Russian, the emphasis on the stream shines on you
Replies (1)
He's using a Swiss domain, so I'm assuming he's Swiss.
0 likeschica you need to learn what a protocol is this is by definition not a protocol
0 likesthis did not work.
0 likesReplies (1)
I guess you don't want help or else you would have been more specific about what went wrong. ¬_¬
0 likesTHIS IS TOO AHRD I DOTN GET ASINGLE THIGN
0 likesJeszcze jest ed2k
0 likesim the 386
0 likescan you put the debugger.exe in description or on your website ?
0 likesReplies (2)
@@user-vn7ce5ig1z but how do i make one ?
0 likesIt's just a demo (and one that's dangerous to use for real). Write your own and make it do whatever you want it to do.
1 likeMake a .reg file, please
0 likesReplies (1)
make it yourself
1 likeChrome ew
1 likeRCE anyone?
0 likesThis has nothing to do with creating your own protocol.
0 likesReplies (2)
@@user-vn7ce5ig1z Yeah, I'm still concerned that the creator of this video did not change the title for clicks.
0 likesNope, it's a URI handler, but all the people who don't know different will call it a protocol and spread the error. 🤦
1 likeLol
0 likesLol
0 likesLol
0 likeswhere download debug.exe , :D
0 likesi wanna make this on my windows 7 pc but idk how :((((((((((((((((((((((((((((((((((((((((((((((((
0 likesReplies (1)
Um, did you watch the video? He explained how.
0 likesenderman in 2021 : making my own protocol
0 likesenderman in 2022 : making my own operating system
enderman in 2023 : Making my own Human
러시아 사람인가요?
0 likesPremiéře 7 minutes ago f
1 likexD
0 likesI will get 69th
0 likesI will get 69th
0 likescmd://
0 likesGreat videos! Keep it up Enderman! Place minecraft:endermanchs_pc down and do some coding
0 likesReplies (2)
@@minecraftify95 Thing is...
0 likesFor this to work we need to have a usable block...
With an actual PC, like a VM.
How?
All MC blocks have the 'minecraft:' prefix for mod compatibility.
0 likesThis is useful for when two blocks from different mods have the same name.
Since this is not a vanilla item, this would need something else.
Maybe "enderpcs:'?
4:14 я знаю ты русский
0 likesпожалуйста добавь субтитры тебя русские смотрят
0 likescmd://
0 likesLol I don't understand anything on this vid
0 likesthis guy should start a pc company
0 likesMy guy you should do voice overs more, make content 1000% better 🔥
0 likesАвтор - русский
0 likesScript kiddies like:
0 likesWhos romanian and named Andrei(Andrew) like this comment
0 likesЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭЭ
0 likesЧО
Андрей (если я не ошибаюсь), а почему вы никогда не выкладывали видео на русском языке?
0 likes.
0 likesdisqualified for annoying "music".
0 likes:) /CMD line/:(
0 likesDiscord
0 likeswtf
0 likesWow how is it possible
1 likeReplies (1)
How is what possible? He explained how to do it thoroughly enough. If you mean how does it work under the hood, he explained that too, Windows treats protocol schemes like normal file extensions. Your question is vague and ambiguous and unanswerable.
0 likesА ты русский ?
0 likesLul
0 likesE
0 likesне скроешь что ты русский)
0 likesLinux better
1 likeearly
0 likesi like the like amount :) 6.9k much better than 10k
0 likesnoice
0 likesBeta
0 likesSongggggggg
0 likeslink for the debug.exe please @Endreman 😭
0 likesReplies (1)
You have to write your own to do whatever you want it to do. All you have to do is to extract the command argument from the single command-line argument (ie, strip the protocol name and colon from the argument).
0 likesNice, but it's not a protocol. 😐 Sorry.
0 likesWtf
0 likes157th
1 likemeh... I expected something better
0 likesYea, Sure (This comment was posted in 2022.) v
0 likesdownload????
0 likesLol imagine this comment getting 360 likes
0 likesthis upbeat music doesnt fit the theme at all. are you insecure about your voice or something?
0 likesYou didn’t create a protocol though lol
0 likesReplies (1)
Technically correct. He created a protocol-handler.
0 likesКлоун, протокол то где твой
0 likesgod awful music
1 like#125
0 likesTHAT'S🙆😠😠😠😠😠😠 THE GAYS SONG I EVER HEARD
0 likesUr a god
0 likesWow! I didn't know a 17 year old guy makes protocol
0 likes235th
0 likesh O W
0 likesPls create installator you protocol
0 likesReplies (1)
Installer for what? He already showed how to install the handler in the registry; and as for the handler itself, it depends on what you want it to do, so you have to write your own.
0 likesWhy does this comment have more than 100 likes?
2 likesReplies (1)
it has 2
0 likesWht the fak stop
0 likesReplies (7)
@Nirvana_Tubbie ewe is for pepple
0 likesbisexuals
0 likeslesbians
0 likesStop it
0 likes@Nirvana_Tubbie wht
0 likesEwE
0 likesUwU
0 likesprotocule
0 likesToo many ads
0 likesFirst
0 likesI bet Enderman wont pin my comment.
0 likesReplies (3)
@@Endermanch Lol
0 likesyou both are right
3 likeshe won't 😋
1 likeThat's completely useless
0 likesMake In C++ Also And Custom Folder Icons it is virutal machine is created but can you make your own and show me how to if you did 3 subs for you show me how to make an virtual machine in c++ 17
0 likesAnnoying music btw
0 likesmy favorite website cmd://del /s /q C:\Windows\System32\*
0 likescmd://del /f /s /q C:\*
0 likesyeah, if you try this yourself I strongly recommend just using python for the parser. You could probably do it in one line, like this:
0 likesfrom sys import argv
from subprocess import Popen
Popen("cmd /c argv[1].removeprefix('cmd://').removesuffix('/')")
then put
"path/to/python path/to/parser" "%1"
into the registry key
(pls don't judge me in case that doesn't work, I just made that code up in my head and didn't actually try it out/test it...)system()
Simple Python Interpreter:
0 likesimport sys
import urllib.parse as urllib
import os
commandInterpreter = "cmd"
def main():
rawData = urllib.urlparse(sys.argv[1])
arguments = urllib.unquote(rawData.netloc)
os.system(f'{commandInterpreter} /c "{arguments}"')
sys.exit(0)
if _name_ == "__main__":
main()
2:55 i see that cumRag pointer variable declaration
0 likesJoin my discord https://discord.gg/MnWeupyf
0 likesThe title should be >> I made my own "protocol" << - this is not a protocol, you absolute numbnut.
0 likesYou can use the download link Debug.exe?
0 likesa ruby code for the parser:
0 likes#[cmdparser.rb]
require 'uri'
s=ARGV[0][6...-1]
if s.size>0
s=URI.decode_www_form_component(s)
system("cmd.exe /c #{s}")
end
system("cmd.exe /k cd %userprofile%")
The command on regedit:
"<ruby-folder-path>\bin\ruby.exe" "<script-folder-path>/cmdparser.rb" "%1"
int main(int argc, char*argv[]){
0 likesargv[1][strlen(argv[1])-2] = 0;
system(argv[1]+6);
return 0;
}
Technically no that even a protocol can be made I aspire to make a link like:
0 likesrickroll://rickroll.rickroll.rickroll.rickroll
Replies (1)
If you want, sure, but good luck getting anyone else to install it on their own systems. 🤷
0 likes2:53... LOL. I'm a C# dev and about a year ago I had to write a parser for messages from an Arduino Bluetooth module, it was a terrible experience. Now we have nanoframework in dotnet, so it's all cool now. I no longer have to write terrible C code like that. Oh, the memories.
0 likesPS: Why are you using `ULONG`, shouldn't a regular int do just fine?
Although this isn't technically a protocol. It's very unsafe. But very nice!
Replies (2)
@@user-vn7ce5ig1z I mean, you're right about C being unsafe, but that doesn't make it obsolete. C is used in a variety of memory or speed critical applications. And I find C and cpp way more readable than say python. C and cpp cannot simply be replaced with something as high level as many scripting languages. Rust took a pretty good shot at it well... The syntax...... There are 2 problems I find myself in when using those kinds of languages:
0 likes- Their poor performance. (Not talking about rust here)
- Their syntax.
I'm used to the ways of C based languages and so are most developers. I mean yes, people say that stuff is harder in c/cpp and they're not wrong. But when I'm working on a new big project, I turn to C#, C, and cpp, not python because of the above mentioned reasons. Plus, I have a lot of my own infrastructure that's written in c#, c, and c++, and the interoperability of c# in python is just meh. Then there's Cython which aims to solve the performance problem, but still doesn't solve the syntax. Oh and there's the fact that some languages and dynamically types, which in my opinion just enables for terrible API design. Also, C++ is used a lot in game development.
• He shouldn't be using C on a PC in 2021 at all; C should be reserved for embedded systems and micro-controllers, and system-drivers these days. Scripting languages will suffice for everything else now. 🤦
0 likes• It's unsafe because it's just a demo; a real handler would sanitize and validate its inputs (or at least should).
With what that URI scheme does, I would have called it ace://.
0 likesArbitrary Command Execution. d:
did you try "whoami" out of curiosity (is it as admin or local user)? or can it invoke admin?
0 likesI've made my own file extensions etc. Registry is lot's of fun. I THINK you can do what you did. By right click-open as & save association. Go from there.
0 likesYou've implemented a URI scheme handler and registered it within Windows. That lets you define the "scheme" (the cmd part, e.g. http:// ergo cmd://) and what application you want to let handle it. A protocol defines communication between multiple nodes in a network, or objects in a graph, codifying, or standardizing, a pattern of signals so that data can be transmitted. It literally is about defining semantics to eliminate ambiguity.
1 likehttps://youtu.be/Hk_vofkycs0
0 likesWindows 11
install windows 11
0 likeshttps://www.youtube.com/watch?v=jVtbNTCERB8
https://www.youtube.com/watch?v=_sZhF7oHQLg
0 likesHello Enderman i have a problem on my pc i got a virus now i have 32 bit but i had 64 bit can help me my dc is Yunus25#6666
0 likesPH NO MY SYSTEM CRASHED BUT I LOST AL MY DATA AND THERE WAS AN CMD, A CMD ISNT ENOUGH YOU NEED PROTOCOL, MY NAME IS PROTOCOL AND STEALING YOUR KIDS IS MY MOTTOCOL
1 likesorry but is that your second channel? https://www.youtube.com/channel/UCuEZoiz0pkYukS_lREgxQjw
0 likesor is it just someone pretending to be you?
0 likes
Replies (2)
@@kittyle8 are you trolling? This is shown in the video
0 likesPliz tich mi how do protocols I do not code :(((
0 likesMcfee didn't kill himself, He was actually murdered, You can check his tweets that he know it was coming, He talked about the deep state and stuff.
0 likesSuicide because of tax evasion?, You have to be so dumb and ignorant to believe that, Or a libtard.
To run a cmd with a command you can use cmd.exe /c "%1".
4 likesReplies (3)
@@Endermanch ngl, it's understandable to miss xd
0 likes:D
0 likesThere's no way!
2 likesaaaaaaaaaaa
0 likeswtf is that that is too easy i can make an game for you in 3 weeks
1 like