Wow. Cool Idea. But I think this protocol would have security flaws as websites could theoretically carry out this protocol without the user's permission

web browsers have in-built protocol consent screen which will always be activated no matter what, unless you purposefully turn off security features

@@Endermanch However, in some browsers you only need to accept once and the browser can remember that some protocoll was accepted...
And usually that means if e.g. cmd://winver was accepted and remembered, then the browser also won't ask again if the next url is somthing like "cmd://del /r C:/"
(only the protocol is remembered, the "payload" is usually ignored)

In chromium based browsers you can click "remember my choice" button

@@tslivede what a careless act to have this thing enabled

@@Endermanch it could be somekind of phishing related attack, ppl download and run random stuff so i won't be surprise if it happen...

@@Endermanch Remember pal; most people are that careless. Internet Explorer still has users.

I could also think of one flaw where in one protocol (I'll use cmd:// for instance), it runs a program in an elevated state even though the browser doesn't...

the only turning point is how to exploit that flaw, I suppose

@@thebelovedmoon good point if someone is skilled enough

Just type your command i.e. cmd.exe /c example.exe in the adressbar of explorer. No need for your own protocol

@@tslivede browsers only save the choice for that specific website. chromium based ones at least.

No one speaking of the fact you have to execute software first to install the key? Dumb kids will always get viruses (I know I did), and registering a protocol is not the easiest way to do it. There is nothing new here.

@@remty516 may sound stupid but you could change an existing key that is commonly used to run the commonly used app and a virus in the background obviously this isn't the most efficient way to do it tho

@@honestlyidk2585 yeah sure, but there already exists plenty of ways for a virus to stay active all the time. This is one of them, but too high level to be practical IMO, lower level stuff like rootkits and startup scripts are just plain better

@BENJAMIN LEBRON GONZALEZ I had a crypto miner once, and it was so new that when I manually scanned it in Windows Defender it would go "nothing wrong here"
Also pushed it to Virustotal and it had a low detection rate in the beginning, and then after a week or so it was being detected as a virus lmao. Also the miner exe was created by a vbs script on startup which I had to manually find as that went unnoticed. I feel bad for not keeping that script. Maybe I could find it somewhere in my old drive if I didn't delete it.

@BENJAMIN LEBRON GONZALEZ I had a crypto miner once, and it was so new that when I *manually* scanned it in Windows Defender it would go "nothing wrong here"
Also pushed it to Virustotal and it had a low detection rate in the beginning, and then after a week or so it was being detected as a virus lmao. Also the miner exe was created by a vbs script on startup which I had to manually find as that went unnoticed. I feel bad for not keeping that script. Maybe I could find it somewhere in my old drive if I didn't delete it.

a good idea that enderman could add is a box that says "Are you Shure you want to execute the command Rd C:/? ONLY CLICK YES IF YOU UNDERSTAND THE COMMAND IT COULD BE A VIRUS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

@@Endermanch I have a vid idea using ntlite if you can please try 1 gb win11 or any other program<br>Edit: I meant win11 under a gb

@@Endermanch I have a vid idea using ntlite if you can please try 1 gb win11 or any other program
Edit: I meant win11 under a gb

Even though this is actually right, I think that, what Enderman did was merely a demonstration -hense he used a simple program he created to pipe the commands onto cmd

I mean you can already fingerprint computers via protocol flooding (even on tor)

@@anonomyssome0ne965 He did this, look at the debugger he used :P

@@HandyGold75 a yes/no prompt would be cleaner.

@@HandyGold75 a yes/no prompt would be cleaner.

@@falsehope4421 He typed it directly in the address bar, he didn't call the protocol form a specific site. There's no way to trust the source then...

@@falsehope4421 this is not something you upload to 'google' and such. This is a protocol handler for a custom URI scheme.

Creating such is quite normal for starting applications from a web page.

As an example, shortcuts for Steam games uses the custom URI Scheme 'steam://rungameid/*game-id*'

You can navigate to this in a browser as well and it'll ask you if you want to launch Steam. In this case 'steam://' is the "protocol", but it's only available if you have steam installed.

His protocol handler example can be harmful, but only on PC's that have installed and registered his handle.

@@falsehope4421 regardig 'http://' and 'https://'... These protocols are commonly used and are handled differently today. You'll most like find a handler that points to Internet Explorer, even though you have a different browser.

Remember! What he made is not really a "protocol" as such, but rather a handler for a custom protocol / URI Scheme like 'example://'.

You register the scheme, points to an application it should launch, and it'll call that application with the URI path as arguments.

How browsers handle such custom schemes could differ. But if they support the scheme, they'll have integrated actions... If not, they'll ask the operating system if there are any registered handlers for that scheme. If there is, it'll get the name of that handler and ask the user if he/she wants to launch that application.

Something at least 3 lines and sounds smart is this reply. Isn't that what the original comment was for?

@@G-u-z-i-o but I wanted the free vbucks :( 😞 lmao

@@G-u-z-i-o but I wanted the free vbucks :( 😞 lmao

@@thebelovedmoon if the browser isn't elevated, then it can't start elevated programs

@@user-ge4uk9ui8y true, but like I said, it CAN have the ability to run elevated progs without elevating the host (eg. the browser)

there may be an exploit to demo that

@@thebelovedmoon you can't run elevated programs if you yourself aren't elevated, that's not the browser, that's the operating system, you can't go around it

Ender's Praser has a "allow passthrough" plugin which you have to type y or n to execute the command

@@Endermanch i know im late but can you but the parser up for download?

It asks if they want to pass the command through though

It asks if they want to pass the command through though

@@tubbunny ooh that could be a dubious exploit if ever

@@tubbunny ooh that could be a dubious exploit if ever

@@sagegeas9205 mostly businesses and people using windows xp

@anonomyssome0ne965

TYPE “rd C:\ /s /q” WITHOUT THE QUOTATION MARKS FOR FREE ROBUX AND 999 FPS IN FORTNITE BATTLE ROYALE

@@Endermanchthats true but some people may click it anyway


@@beanosuwu5168 bro, do you think anyone fucking cares, stop crying about someone copying a comment

@@flickaru ah yeah, what beanos uwu guy said was a really funny joke

my grandparents view me like this man because i am like him

"But I've only turned off the computer, grandpa"

@@Daniel-cc6gs it was quite literally ironic
"Oh look an original comment... SOMEONE COMMENTED SOMETHING LIKE THAT 3 MINUTES AGO, YOURE OBVIOUSLY A STEALER GO TO HELL " like its really fucking obvious the hell is wrong with you people

@@Daniel-cc6gs it was quite literally ironic
"Oh look an original comment... _SOMEONE COMMENTED SOMETHING LIKE THAT 3 MINUTES AGO, YOURE OBVIOUSLY A STEALER GO TO HELL_ " like its really fucking obvious the hell is wrong with you people

Oh boy, here we go again.

I love the Youtube reply section.

@@beanosuwu5168 coincidences cant happen yes

Staph, ur literally porting Twitter to a YouTube reply

@@beanosuwu5168 who asked? man laid out a paragraph lmao<br>do we look like microsoft word?

@@beanosuwu5168 who asked? man laid out a paragraph lmao
do we look like microsoft word?

@@Daniel-cc6gs Thank you for disgusting my mood, imagine picking up meaningless arguments

@@Detoox21 beanos guy said "I might be overreacting" and proceeded to complain about it, what do you expect my guy of course he is gonna start a war

@@HeidenLam thank you for caring enough to read the argument fucktard, the moment you saw my reply you could have stopped reading and just go watch the video

@@Daniel-cc6gs Dude it's not like you didn't do the same thing

@@HeidenLam so? did i start crying about my mood getting ruined

@@beanosuwu5168 Bro, go to touch some grass

@@Daniel-cc6gs so? I will cry when I want to, no one can stop me.

Lmao. Creating ur protocol is everywhere and i can make a "new"protocol by cooy pasting

@@mishaproduction damnnn u destroyed him right there

Same it's when I am updating my Batch OS


enderman in 2021 : making my own protocol<br>enderman in 2022 : making my own operating system

enderman in 2021 : making my own protocol
enderman in 2022 : making my own operating system

Enderman in 2023: making my own computer parts

Enderman in 2023: making my own computer parts

Actually, takes alot of time but not that hard

Actually, takes alot of time but not that hard

Enderman in 2077 - simulating the life in his own operating system

@@cowclan3382  Actually, Windows CTAC is just modified Windows XP. It doesn't count as completely making your own operating system.

Tbh making your own operating system isn't hard, it's just really time-consuming

enderman in 2024  simulating earth with pc viruses

enderman in 2024  simulating earth with pc viruses

@@danieleremin1924 Enderman in 2024: Making my own metal

@@danieleremin1924 Enderman in 2024: Making my own metal

@@mathieu9626 Making an operating system that boots up and nothing else is easy, Making one that does stuff depends on the stuff you want.

yk you can download and customise the linux kernel, and the free bsd kernel

@@cidsx But the kernel part is a nightmare. Try preventing all the memory leaks and overflows and making sure it runs well on 1GiB RAM with only pure C.

@@minecraftify95 Dum dums don't know those.

@@minecraftify95 Dum dums don't know those.

@@cidsx you clearly have no idea what you're talking about. come back when you can design a kernel, lol

Making an OS is one thing, making an OS that's usable and stable is a whole other thing

@@danieleremin1924 Enderman in 2024: Bulding quatnom computer.

I know already what an enderman and its spawn egg is, but I don't know how to make it pick up a pumpkin

Enderman in 2690: making my own asdcguikgjhw,cdsgjhkdsfgnmwfefghjkffdgujm

Enderman in 3021: making my own parallel universe

Enderman in 3021: making my own parallel universe

لقيت عربي بقناة اجنبي اخيرا :)<br>EN : i found an arabic man in english channel :)

لقيت عربي بقناة اجنبي اخيرا :)
EN : i found an arabic man in english channel :)

me in 2021: making my own file extension<br>i know how to do that

me in 2021: making my own file extension
i know how to do that

@@nocturn9x Nobody said that it had to be fully from scratch. Most people or orgs that make operating systems still use something else as a base.

@@cidsx Well, even if you start out with a baseline there's plenty of stuff to design. Graphical interfaces and driver support are 2 of the most major challenges

@@defalt2384 Well LFS is literally just a big Lego after all, you're not building anything from scratch, just putting pieces together, so I agree

@@龗 Someone made an entire os in common lisp (look up mezzano OS). Trust me, you CAN make an OS in pure C and most of them are built with pure C, don't say random bullshit lol

@@SunIsLost you remind me of someone.........

@@SunIsLost you remind me of someone.........

@@pentagonanimates file extensions aren't "made". I can have a ".wtf" file and make it work with my program. You can store jpegs in a .mp3 file, what matters is the content. The file extension is only used to let the OS know which program it should use to open that file

@@cowclan3382 thats just a windows bootleg. he's referring to making it complete from scrach

Enderman in 2030: making my own solar system

Enderman in 2030: making my own solar system

@@龗 Some people did it only in assembly. Look at MenuetOS.

@@user-ri3wb6gw2k هلا بالعرب .. ما كنت اعرف ان في عرب عند اندر مان 😂

@@7Maj هلا بالعرب 💚

@@7Maj هلا بالعرب 💚

Enderman in 2024: making my own ender gpu 2000

Enderman in 2024: making my own ender gpu 2000

@Ma1w4r3 enderman in 2100 : re incarnating as an operating system

Making a Os isnt that hard (Depending on how good you are at programming.) you should learn x86. Most virtual machines let you run compiled x86. Its pretty fun to do.<br>Edit: It takes a lot of time tho.

Making a Os isnt that hard (Depending on how good you are at programming.) you should learn x86. Most virtual machines let you run compiled x86. Its pretty fun to do.
Edit: It takes a lot of time tho.

Paulo Constantino in youtube has advanced, has his own computer created by him and his own operating system and is public for connect and testit, sol-1.org

U all act like he did a job no one is capable of and u al view to this copy pasted stuff like it is hard to do it

Gotta wait untill enderman made his own version of windows 😳

No in 2022 he will make his own search engine

No in 2022 he will make his own search engine

@@danieleremin1924 enderman in 2024: fine, I'll mine the raw materials myself

@@cidsx True i am a programmer and im working on being ahead of microsoft i am making Windows 13.its just really time consuming

enderman in 2023 make an desktop OS with pure Python

enderman in 2023 make an desktop OS with pure Python

@@cidsx sure, whole pc thing is just about translation, synthesis thoughts on different elements. A good translator will get to that point sooner or later.

Enderman in 3000: Making waterproof enderman

Enderman in 3000: Making waterproof enderman

enderman in 2023: making my own UFFI frimware

enderman in 2023: making my own UFFI frimware

linus torvalds in 1991<br>imma do it myself

linus torvalds in 1991
imma do it myself

@@龗 well you can but making your "own" OS needs assembly

@@龗 well you can but making your "own" OS needs assembly

What we should do in linux? And thanks for this

What we should do in linux? And thanks for this

@@TeoKA19 Ender man in 35942: creating a universe

@@TeoKA19 Ender man in 35942: creating a universe

Enduhman in 2023: I made my own super server with 10^999999 terabytes of storage to store all my virtual machines in!

Enderman in 3000 AD: proof that bill gates lied to you and he didn't leave microsoft

Well here we are in 2024. I only just got introduced to ender, so idk if any of this has happened, but I wouldn't be surprised to see the OS part


Enderman be like "I don't think there are enough RCE vulnerabilities in my system. Imma make one"


Alternate title: Enderman single handedly makes the most vulnerable protocol on earth

no, gain-remote-acess:// is more venerable

@@anonomyssome0ne965 you could achieve the same effect with cmd://

@@moonbarc Can it make a website laggy over a period of days? Modify data flow to the site?

@@OliverK-w8m it could literally do anything to the PC

@@moonbarc But does this make it easier to target websites? I'm trying to figure out it's funcionality.

@@OliverK-w8m it lets any website execute any system command on your computer

@@OliverK-w8m the flaw is to the computer, not the site

@@moonbarc the URL protocol file:// is rejected for websites

I think it's safe to assume a random website won't be able to use local protocols like that
Plus Windows asks you it seems

@@bottinator22 that's just a debug window that he put in


next up:<br>making my own kernel and architecture so i can install malware without windows stopping me

next up:
making my own kernel and architecture so i can install malware without windows stopping me

There is a thing called disable antivirus

@@lxrenz it's pretty much impossible to completely disable Windows Defender though.

@@jonasgrill1155 yea <br>@Lxrenz113 Aviation: it's called a joke

@@jonasgrill1155 yea
@Lxrenz113 Aviation: it's called a joke

@@jonasgrill1155 yes its possible. delete sc.exe, smartscreen.exe and SecurityHealthService.exe from system32.

@@lxrenz well sure, if you delete system files you can, but knowing Windows deleting those files will probably break something completely unrelated.

@@lxrenz hm. Seems like a bad idea to disable all security on your PC, but you do you I guess.

You can do that on linux but the chances of the malware actually working is pretty slim due to linux having not trash security

@@killertigergaming6762 beacuse wine is not the hyper technology also linux can't run .exe files without wine.

@@lxrenz This will only delete the Defender files, if you really want to delete Windows Defender, you need to do some other things too.

@@killertigergaming6762 Linux is a kernel, GNU is the software in it. It has NO security software, but you can install "sudo" or "doas" to have password security, and there is "ClamAV" but it sucks tbh.

@@jonasgrill1155 Well I managed to do it by going into a windows PE and removing all of the files related to it

@@jonasgrill1155 you can use Windows Customisation Tool

@@龗 clam av exists and even then antiviruses are a scam most of the time to begin with you don't need a antivirus


god we love websites opening command prompt :)

@@finnbarm and then removed it for extra fun

it wouldn't work if you don't have the local protocol

@@vistaman1 stfu I was just trying to help, he said ‘website’ which is wrong

@UCAIwYL67Hcf6AMHnJhvvH2w you stfu, it was a joke

@@taureon_ yes..... safe

hesitates

sure

@@taureon_ yes..... safe

*hesitates*

sure

@@alfiewhitson7726 you calm down, it was a joke


Hope MS will merge it in Windows. Such a good command execution exploit : )

Wouldn't be surprised if it's one of the only new things in Win 11...

Would be a very big security risk for your computer. Imagine you enter a random unsuspecting website and it starts to erase System32 LMAO.

MS doesn't need to add nothing to have a big security risk on their system, just search these "EternalBlue", "SMBGhost", "SMB CVE"

@@lowrhyan567 what stops to add one more?

@@emblemi6345 I don't know man, you have been acting sus lately, it seems that we have an impostor among us

@@kolt5511 Website: "Make your PC faster" User: <b>*clicks button*</b> Website: "By Deleting system32"

@@kolt5511 Website: "Make your PC faster" User: **clicks button** Website: "By Deleting system32"


Me on Linux: look what they need to do to mimic a fraction of our power

@@p6n7l 4 days ago...<br>Hey, do you still uses arch?

@@p6n7l 4 days ago...
Hey, do you still uses arch?

Really easy on Linux, just create a file called ~/.local/share/applications/whatever.desktop with these contents: (important: it's case sensitive)

[Desktop Entry]
Type=Application
Name=whatever
Exec=path to executable %u
MimeType=x-scheme-handler/your scheme

Optionally add 'NoDisplay=true' to hide it in the launcher

@@p6n7l Kali is the only way to go if you know what your doing 🌝

@@aguiar.8181 kali is built like shit lmfao

@Harsh Raj let me tell you that kali isn't meant to be used as a daily driver

@@aguiar.8181 nobody in IT actually knows what hes doing, everyone is always pushing the edge^^

Arch users on top! Also when will you people learn that kali is a terrible desktop distro unless you spend 90% of your day pentesting stuff.

@@ezweber_the_great Agreed. i use arch, and its not so bad.


technically you're defining a protocol handler, not 'creating a new protocol'

Actually it's called an URI handler. It doesn't even remotely have something to do with a protocol.

@@LostPhysx URI Scheme handler* according to the freedesktop spec, still the term protocol handler is thrown around often enough

All this pedantry in the comments, why don’t you go define some bitches🤨

@@masamune5710 it ain’t pedantry if it’s true

@@90hijacked do u have source for this beccause I use GNU/Linux and on my OS what he did in the video is generalized into a MIME Type and done with 1 file and 1 command

@@willinton06 no, all pedantry is inherently true

@@LostPhysx no  its a application level protocol

haha was searching for this comment, but i guess it is the same for non-techies ;)

@@masamune5710 This comment deserves more likes.


4:04 Using command prompt to open command prompt, that's cool

Yeah it works you can enter "start" in cmd and it will open another one

@ and if you put “start” inside a loop in a batch file, it will create infinite windows and crash your computer.

@@SomeNot I prefer doing it by slowly filling the heap in 8 byte increments, inside a "for(;;)" of course. Takes a while to realize something is wrong.

I once opened blender through file explorers path bar


"It's just over 100 lines long"<br>It sounds like description of 99% of code in my projects folder

"It's just over 100 lines long"
It sounds like description of 99% of code in my projects folder

I did this, but for executing python code. Nothing wrong with pasting the script here!

import sys

import urllib.parse

import logging

# Configure logging

logging.basicConfig(filename=r'C:\Users\xxxxx\Documents\pyprotocol\script.log', level=logging.DEBUG, format='%(asctime)s %(levelname)s: %(message)s')

def main():

    try:

        if len(sys.argv) < 2:

            logging.error("Usage: py://<url-encoded-string>")

            return

        # Get the URL-encoded string from the first argument

        url_encoded_string = sys.argv[1]

        logging.debug(f"Original URL-encoded string: {url_encoded_string}")

        # Remove the 'py://' prefix if it exists

        if url_encoded_string.startswith("py://"): # It assumes that you are using the py:// custom protocol

            url_encoded_string = url_encoded_string[5:]

        # Decode the URL-encoded string

        decoded_string = urllib.parse.unquote(url_encoded_string)

        # Log the decoded string

        logging.debug(f"Decoded string: {decoded_string}")

        # Remove any trailing slashes or whitespace characters

        decoded_string = decoded_string.rstrip('/').strip()

        # Log the cleaned decoded string

        logging.debug(f"Cleaned decoded string: {decoded_string}")

        # Execute the decoded string as Python code

        try:

            exec(decoded_string)

        except Exception as e:

            logging.error(f"Error executing code: {e}")

    except Exception as e:

        logging.error(f"Unexpected error: {e}")

if _name_ == "__main__":

    logging.debug("Starting the script")

    main()

# very simple to customize, just change a few things

I did this, but for executing python code. Nothing wrong with pasting the script here!

import sys
import urllib.parse
import logging

# Configure logging
logging.basicConfig(filename=r'C:\Users\xxxxx\Documents\pyprotocol\script.log', level=logging.DEBUG, format='%(asctime)s %(levelname)s: %(message)s')

def main():
    try:
        if len(sys.argv) < 2:
            logging.error("Usage: py://<url-encoded-string>")
            return

        # Get the URL-encoded string from the first argument
        url_encoded_string = sys.argv[1]

        logging.debug(f"Original URL-encoded string: {url_encoded_string}")

        # Remove the 'py://' prefix if it exists
        if url_encoded_string.startswith("py://"): # It assumes that you are using the py:// custom protocol
            url_encoded_string = url_encoded_string[5:]

        # Decode the URL-encoded string
        decoded_string = urllib.parse.unquote(url_encoded_string)

        # Log the decoded string
        logging.debug(f"Decoded string: {decoded_string}")

        # Remove any trailing slashes or whitespace characters
        decoded_string = decoded_string.rstrip('/').strip()

        # Log the cleaned decoded string
        logging.debug(f"Cleaned decoded string: {decoded_string}")

        # Execute the decoded string as Python code
        try:
            exec(decoded_string)
        except Exception as e:
            logging.error(f"Error executing code: {e}")

    except Exception as e:
        logging.error(f"Unexpected error: {e}")

if __name__ == "__main__":
    logging.debug("Starting the script")
    main()

# very simple to customize, just change a few things


Give a CMD, a Regedit and a Windows 10 PC to Enderman. And see what will happens.


That beat at 0:42 really synced with that Steam window popping up.


Gotta give you some credit for writing a parser in proper C, I was expecting a batch script at most. <br>Overall, this is a cool little project. Probably a great learning experience.

Gotta give you some credit for writing a parser in proper C, I was expecting a batch script at most.
Overall, this is a cool little project. Probably a great learning experience.


Next up on Enderman:
I made my own operating system

just realized people stole my comment and got more likes
oh well (Hypé⠀✔ lookin at you)

Next on enderman: I build my own motherboard

@@WhirlwindQuest  And then "I built my own CPU"

I think he works on microsoft cuz he's so smart xD

nice

Just MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust MonikaJust Monika

Actually is not that difficult to do, you could create a Linux distro fairly easy


this is how my mom sees me when i build a computer


That sounds like a very usable idea for creating custom user shells via web design patterns, similar to ChromeOS. You can just strip Windows of all its graphic applications leaving only components necessary for browser, let the browser in and create some webpages to replace Control Panel and so on. Also you can create simple authorization in this interpreter app to ensure local scheme integrity (i. e. no one who already knows you have this feature will be able to open your apps from their site).


2:46
Enderman: this code is not that big just a bit more than 100 lines
Me: ok

thanks for this!

2:46
Enderman: *this code is not that big just a bit more than 100 lines*
Me: *ok*

thanks for this!


"Here's the code, is not that big"

Proceeds to show 10629372026293 lines of code

"Here's the code, is not that big"

*_Proceeds to show 10629372026293 lines of code_*

Damn, i wonder how many features that thing has


• You don't need the "@" entry in the key.
• Instead of "%1", pass "%L" to accommodate long filenames.
• If you use :// in the scheme, the system will append a trailing slash (cmd://blah → cmd://blah/). Just use cmd:foobar
• It's easier to use a scripting language than C (but you have to compile it; you can't execute the script itself).

• You don't need the "@" entry in the key.
• Instead of "%1", pass "%L" to accommodate long filenames.
• If you use :// in the scheme, the system will append a trailing slash (cmd://blah → cmd://blah/). Just use _cmd:foobar_
• It's easier to use a scripting language than C (but you have to compile it; you can't execute the script itself).


this is actually just what I needed!
you are a hero my guy
I just gotta make it a bit more secure but all in all this is awsome!
great work my guy


Now I need to be less stupider to actually run my VM programs on my navigator.

@@clementpruvost8670 bro use virtualbox and you mac install macOS


Idk why, but the intro music is just really good...


This is like an old school tutorial it’s great


4:14 Рязанский проспект xD

4:14 Рязанский проспект xD

@@atikinbtw вроде как он все ещё в России. По крайней мере, когда он ставил раньше Винду, он указывал московское время

@@atikinbtw если ты про ненависть к России, то я думаю нет ничего такого, что бы высказать мнение о своей родине. Я знаю многих, кто ненавидит Россию, но у них есть разные причины, почему они все ещё в ней живут - финансовые, семейные, и т.п. Может он это написал, что бы его не ассоциировали с Россией, ведь он уже наверное устал отвечать на вопросы "say plz something in Russian"


this man is what my grandparents see me as lol

@@notChocoMilk Dude, he commented before the other guy idiot

@@bitonic589 no? It's 2 minute difference and other guy did it quicker


Such an epic idea! You're the beast of software engineering!

Guys, please understand that this is kindergarten level stuff lol

Fact: You can mess up with the system environment values to make %desktop% or %minecraft%

@@makezdtem but it won't work on browsers, will it?

@@minecraftify95 I already played Minecraft and I know most of the basic informations about it so no need to tell me about it.

@@bloomingch lol he's like a bot he spammed almost every comment

@@makezdtem You could do anything in the registry, rename Windows, change values of anything.

@@p0xygen everything is easy if you know. I didn't know so it wasn't easy for me.

Funny how people always seem to think that anyone who knows anything they don't is a genius, like a young child who knows nothing thinks another child just one grade above them is smart. ¬_¬

@@user-vn7ce5ig1z I mean nobody would fiddle around such stuff and you have to, say, know plenty of stuff including how URI scheming works and how Windows handles them. That's why he's pretty smart to me. Also I'm not a child. I'm literally 18 years old and will turn 19 in a couple of days so your take about me being a child is also wrong.


psa: if you actually make a protocol to cmd, it could cause some serious security issues by allowing any website to open cmd and run anything it wants

But if you added like "Do you want to run "rd c:\ /s /q" in an elevated command prompt?" warning then it you could just type n


The songs he used: 1st: NIVIRO - The Labyrinth (NCS: https://www.youtube.com/watch?v=4S0shEqJ8Vc), 2nd: Robin Hustin x TobiMorrow - Light It Up (feat. Jex) (NCS: https://www.youtube.com/watch?v=bdE_SyHad90). He added the name of the songs in the video.


I fucking love how you make your videos the same way an old Windows XP video looked like back then.


Here's how you'd pull this(URL Parser) off in Python:
from urllib.parse import unquote, urlsplit
from sys import argv
from os import system

# argv[1] is the first arg, argv[0] is filename
passed_url         = argv[1]
# urlsplit returns a named tuple with the split sections of the url, like protocol, location, port, query params, etc.                                split_url          = urlsplit(passed_url)         # split_url.netloc returns a string with the actual location (in this case, command), without protocol and stuff
location           = split_url.netloc             # unquote decodes the URL-encoded params like %20
decoded_cmd        = unquote(location)
# this checks whether the decoded_cmd is empty, in other words, the passed_url is just "cmd://". This is to prevent the error below, where we use cmd /c.
if not decoded_cmd:
    decoded_cmd = "cmd"

# finally, run the commmand with cmd /c
system(f'cmd /c {decoded_cmd}')


Me: looks away for a second

Also me: Looks back

Enderman: So thats the answer to life!

Me: *looks away for a second*

Also me: *Looks back*

Enderman: So thats the answer to life!


Next video: " Creating my own operating system "

its not hard. making a linux distro is pretty hard for newbies, but for programmers, its easy

@@wvrld4691 Other than batch scripts, it's not that much programming.

I made a Linux distro once, it was based off of arch linux, all I did was add packages to pre install, an automatic installation script and custom .config files to make it how I want it to be. Of course, what I said was an oversimplication, it really isn't that easy. Also you need to learn to use command line, for UNIX and UNIX like systems.

@@wvrld4691 dude but the joke is about making something bigger (not about hard) than this

@@wvrld4691 I don't think making a Linux distro constitutes as OS dev, lol.

But i copy pasted and my viewers think im 3000 iq edition

It's hard to make an operating system and an idiot like enderman that spreads misinformation can't do it.


1. I love the NIVIRO song in the vid, so thanks for putting that in.<br>2. Also this is really cool! Do something similar to this again!

1. I love the NIVIRO song in the vid, so thanks for putting that in.
2. Also this is really cool! Do something similar to this again!

@@unpatientes1562 NIVIRO - The Labyrinth


Fun fact:<br>Typing "md" with 2 words without quotes will create 2 folders.

Fun fact:
Typing "md" with 2 words without quotes will create 2 folders.

@TheThunderGuyS not everyone that uses a computer needs to use a command line

@TheThunderGuyS that's what we call a hasty generalization, I have used a computer and did not know this.

Thanks @Aless

MD means "make dir" or make directory so it obiously will make a folder or how much you want

I'd bet the majority of people don't know what a command line is let alone used a command line. And i'd bet even more didn't know how to create 2 folders at once.

For what would the average joe need a Windows CMD? For opening Chrome? For using MS Office?
Think of what you use the CMD for and think if an average user does that.

@@paulvorderegger1522 cmd is cringe.   use bash instead

@@castles990 that's not what he's even talking about?

@@castles990 R U serious telling me I should use a bash shell to create a folder on Windows? U do know that BASH is a shell for UNIX based operating systems and Windows is not UNIX based?
Also, why should every computer user have used a BASH shell (or CMD) before?
So tell me how am I gonna use a bash shell to perform tasks on a Windows PC (WITHOUT a VM or a Linux Subsystem)? Im interested now.
So what you are basically telling me is "Just switch to Linux".

Also, lets not talk about me. I personally use both Windows and Linux and have good knowledge of both OS's and of course I do use the bash shell.

Everything doesnt change the fact that not every computer user used a command prompt or terminal before. You should change it to almost every Linux user.


This is really good for Online games, Passing the parameter to the game through web protocol


videos like these are the coolest! glad i found your channel


The Enderman: A mob in minecraft, also loves to use Windows 10

loves to use or loves to push it to its limits?


I believe you, as a Python developer I have tried strings in C, and it was a real pain.


I'll be using this to make custom room join links for my online game! Thanks :D

@@KrasnodarMappingUmbreon251My game works with self-hosted servers. You open the game and you can either host or client (if you host you have to forward a port). You can also choose the port and then, the client uses your ip and port to connect (they enter it on the game's UI). After watching this video I realised that I could make join links without the necessity to run a web server (even though I own one). Most online games with links work in the browser and you can create codes such as https://mygame.org/join/a8dF82K (idk if that web exists) so that other people can join your room, but that would require you to own "mygame.org". What I did was creating a custom protocol for my game (let's say it's "mg"). After the installation of the game changes are made to the registry and the protocol is added. When people host a server they can send a "link" to the clients like this: mg://127.0.0.1:1234, which would open the game directly on the ip 127.0.0.1 and port 1234. This works through a batch script I wrote to write the "url" to a text file, then launch the game. When the game opens, it searches for such file, enters the "credentials", and joins the "room". After that the temporary file is deleted. What the protocol executes is the batch file with the "url" as a paramenter.

I implemented it :D. Also realised you can do Win+R then type the protocol and itll open

@@0x19 i feel like you should probably test for vulnerability

@@ellie_is_jellie which vulnerability? I don't see how this could be exploited... In the cmd: protocol I can see ways to exploit this, but with my protocol it would only launch the game, the only parameters it sets are the room connection ones, there's no code execution in the protocol itself

@@0x19 now that i think about it, that makes more sense, although i feel like you should host your own game servers and then add an option to people host their own. it would make it easier for beginners or people that just cant portforward at all

@@ellie_is_jellie I don't want the game to be popular or anything, I don't really care about that so I'm not going to use money hosting my own servers, but I'll let anyone host theirs


hats off to you for this wonderful video, learned a lot!


Bro singlehandedly created the biggest security hole in earth in his computer


I can never tell if this man is in his virtual machine or not


That's pretty cool :)<br>Just keep in mind that it can quickly lead into security issues.

That's pretty cool :)
Just keep in mind that it can quickly lead into security issues.

Except if you add a warning that shows the command and you need to type y to run the command.


as a socket programmer i was expecting a network protocol never been more disappointed in my life


I love your tech videos enderman also you have cool username bro


Great work!<br>I'm thinking it will be good for faster integration between Angular apps with OS protocols without NodeJS.

Great work!
I'm thinking it will be good for faster integration between Angular apps with OS protocols without NodeJS.


"it's not that big - just a bit more than 100 lines"

I think I'd consider anything below 500 lines quite small, especially if it's a single file program

Still 100 more lines than I could write in C.

@@RealEpikCartfrenYT bro why you looks like SUS

@@RealEpikCartfrenYT YOU SUS? WAIT, AMOGUS

100 lines? That's rookie numbers. I am currently working on a project that has around 1000!

seems like i created the programmers thread


Oh there’s a Zune protocol.  Nice, that will come in handy someday.

it is just a link to the microsoft store(i checked it out)


This with some sort of confirmation, as showed (before it was removed) should 100% be added to windows.
Imagine being able to install something that use scripts for installation, and just click a link on the site, confirm the commands to be run, and boom!
Or like for troubleshooting, MS could update all their docs with links like this, to autorun the trouble shooting commands, instead of having to direct your grandmother on how to open cmd, ctrl+c, ctrl+v, enter, lol!
Their is so much potential, and as long as it has a confirmation as showed off here, it's not anymore a vulnerability then directing someone to open cmd and copy paste!


Easy if you know what Linux is and the basics of it.


enderman: makes this<br>me: are you challenging me?

enderman: makes this
me: are you challenging me?

@@minecraftify95 ... do you think i don't know what an enderman is?


Thank you for the cool project! I just finished it myself as well.

Though I had to rewrite the program in C++ in a much jankier way  because I don't understand any of the C from your code.

Pls share it with me... I need it<br>I dont know C or C++

Pls share it with me... I need it
I dont know C or C++

@@pradevhuntergaming6218 give me an email address.


Enderman: makes local protocols that passthrough command to cmd.exe<br>Hacker: Easy hack

Enderman: makes local protocols that passthrough command to cmd.exe
Hacker: Easy hack


Alternate title: "I made a major security vulnerability"


did you know that enderman will not pin this comment


Enderman in 2022: making my own protocol<br>Enderman in 2050: making my own pc

Enderman in 2022: making my own protocol
Enderman in 2050: making my own pc


Sussysoft AmogOS imposter edition 64 bit.<br>Comes with free DaBaby simulator and 30 month trial of Big Chungus Keanu Reeves wholesome 100 AOL free internet hacks.

Sussysoft AmogOS imposter edition 64 bit.
Comes with free DaBaby simulator and 30 month trial of Big Chungus Keanu Reeves wholesome 100 AOL free internet hacks.

@@minecraftify95 it is indeed a sus moment


That's pretty cool! Didn't know it was this easy.


4:14
Ты реально живёшь в Малоярославце, или это совпадение?

Он там живет,он Русский

Он там живет,он Русский

Да я понял, что он русский, просто город уточнил


this is good when u work on browser and need something ealse opened fast without wasting time searching the bloated startmenu


This dude in 2084: "Changing speed of time in under an hour."


Enderman: Has to manually allocate heap memory and do a for loop inside a while loop through the entire length of the string just to parse the URL correctly in C.

Me, using the shorter one-liner code of string.replace() and urllib.parse.unquote() in Python: "You know, I'm something of a programmer myself."

In my view a good programmer knows how to use their tools and time efficiently and succinctly. It takes time to understand that overt arcane knowledge only impresses people who don't understand or comprehend what's happening and frustrates other people who have to touch the code. Please keep using one liner abstractions, we love you.


Not me waiting for him to develop an actual network protocol lol.


<b>Wow!</b> You really helped me!, My dream is make my own protocoll tô games😃😃😃

*Wow!* You really helped me!, My dream is make my own protocoll tô games😃😃😃

It's really easy if you know how to use the registry.


Epic idea, You are awesome, Keep going <3


Вауу,а это может быть полезно. Спасибо огромное за идею и туториал


enderman in 2022 : making my own super decrypt software and then running ransomwares on my pc to test it out


Hello!
May I ask you for some advices?
I have created my own protocol, i have the network what uses it perfectly. My dissertation got an award for that.
(There is a video on my channel how does it work)
But i didn't implemented protocol handler, what you did in this video. Can you show us how can we use this handler for a real protocol?
for example a traffic jammer or for a request-answer communication what the http does too


I just love the fact that he has so much knowledge in Programming languages

Like dude, I'm just starting to learn C++ and Enderman doing stuff like this really motivates me to learn more Languages lmaoo


Aw why didn’t you use your voice? We would like to hear it!


0:47 Everyone: Win+R - calc
Enderman, an intellectual: Chrome - ms-calculator://

@@mishaproduction Wait that implies Win+R - calc is dumb but why tho?


Nice and thanks for the vid!
I think this also works without adding an URL Protocol string value and also without forcing the default string value to "URL:name Protocol". I'm saying this because I just checked a couple of protocols and for example Zoom uses only the nested entry structure with ZoomLauncher->shell->open->command with the ""C:\Users\user\AppData\Roaming\Zoom\bin\Zoom.exe" "--url=%1"" string in the command entry's default value and "Zoom Launcher - 3.0.1" in the ZoomLauncher entry's default value.
uTorrent is also similar: uTorrent.exe->shell->open->command entries. There's ""C:\Users\valen\AppData\Roaming\uTorrent\uTorrent.exe" "%1" /SHELLASSOC" in command's @ , uTorrent.exe @ is empty and shell's @ is "open".


Came for the protocol, stayed for the party ♫


<b>When you don't have a bash shell but still wanna look cool</b>

*When you don't have a bash shell but still wanna look cool*


i really like making protocols with electron apps, it's so fun


How parents see you when you restart the router.


Thank you Enderman :), now I understand why some websites can call the application installed on the device from the browser


I do not like manipulating strings in C...

Very relatable


nice I love the old school style, straight informative, gj


I don't really see the purpose of the protocol but it's a fun experiment. As @Paul Jones said, it's not really a protocol more a URI scheme. It's also not a good idea to have the ability to run commands via a URL tab in a browser, very easy to exploit/social engineer.

You don't see the purpose because you don't need it. If/when you do, then you'll understand. As for security, yes, it can be an issue (because this DEMO handler blindly runs whatever its passed), but it's just a demo; with a real handler, you'd sanitize the input and validate it, like what other programs do.

@@user-vn7ce5ig1z Can this make a website a bit laggy? Modify some data flow?


that's super duper cool!

i knew that there has to be a way to do it, but didn't know what that way was :p

how would one go about doing it in linux tho?
are there any scripts or config files that let you configure this?


Really is a func project ^^ maybe in the future this's gonna help me somewhere when I need to access local resources or something


Enderman: about 100 lines of codes is not much <br>Me: Struggles to open .txt file

Enderman: about 100 lines of codes is not much
Me: Struggles to open .txt file


Honestly I agree with the comment about security issues, although on Chrome OS they do have CROSH (Chrome Shell). They have their own built in protocol. (although I have no idea if it includes the option to put in user input before running the terminal) However since Chrome OS is basically just a linux distro, this is actually just a linux shell so yeah...


i love the intro very good <br>Keep the great content

i love the intro very good
Keep the great content


Endermanch actually creating an entire shell for his local protocol
The "c" argument of cmd: Look what they need to mimic a fraction of our power

*Endermanch actually creating an entire shell for his local protocol*
The "c" argument of cmd: Look what they need to mimic a fraction of our power

It needs the thing to parse the url that gets passed to it. It passes the whole url to the program.

@@elihillman8758 In batch we can easily take part of string with %variable~4:5% or a thing like that

@@minecraftify95 I play Minecraft too, but months ago his name was Endermanch


This is pretty cool. The music, though, makes it sound totally EPIC!


Valve actually does this for launching Steam games.
If you have a shortcut to one, you might notice that they're actually URLs, with the 'steam://' prefix.

If you were to copy the link used on the shortcuts and paste them in any browser, Steam would actually interrupt your browser and boot up to play your game.

Yes he mentioned how Steam uses a custom protocol to open up the Steam application from browser links lol.

@@inkoalawetrust I didn't see that while I was typing a comment about it.

The irony

@@inkoalawetrust I didn't see that while I was typing a comment about it.

*The irony*


Enderman 2021 -  i made my own protocol<br>Enderman 2040 - i made my own operating system with kernel built from scratch

Enderman 2021 -  i made my own protocol
Enderman 2040 - i made my own operating system with kernel built from scratch


Next video:<br>The protocol which can KILL your PC

Next video:
The protocol which can KILL your PC

Only because this demo handler blindly runs whatever that's passed to it. You'd have to be nuts to use it for real, you would have to make a proper handler that sanitizes its inputs.


“It’s not that big” I’m sure it has great personality :(


this vid has some hard 2010s youtube tutorials vibes 😳


And what if you pass "y" after the first argument? will it run the command automatically?

No, the system passes the entire URL as a single command-line argument, so you'd have to specifically parse it for that to work (in which case, you could just skip the prompt altogether, like he did with the later, hidden version).


enderman in 68901 be creating dimensions


Commenting before the premiere even starts


I don't really know about protocols, but I think that it's not a whole protocol. A protocol is more a big documentation who describe how to treat data. Here it's more a url type shortcut functionality who often serve to define protocol used, but not solely, it can too serve to target an app, like here


Create your own chrome web browser protocol in windows!<br>Linux users: _wat is this madness_?

Create your own chrome web browser protocol in windows!
Linux users: _wat is this madness_?


Me: Sees parser code
Me: *SELF DESTRUCT IN 1.00*

Me: Sees parser code
Me: **SELF DESTRUCT IN 1.00**


People who don't know how to code:                                                                                Enderman: not much code, just about 100 lines


When i open cmd and accidently make like hacking code:

Me:im hacking bank
My dad:we need to go jail
Me:oh shit


IS THAT LABYRINTH?? I LOVE THAT SONG!!!!!!!!!!!!!!!!


enderman in 2023: making my own internet web


This really helped me in my class project.


my guy has very good taste in music!

fellow NCS enjoyer here 😁


enderman do be grabbin some protocols tho


Came for the protocol, stayed for the music


I made a code, not much just a bit over 100 lines of code<br>Me: holy sh*t

I made a code, not much just a bit over 100 lines of code
Me: holy sh*t

@@suriyealeppo5415 well, i didnt put that "i" in because there is always that 1 guy who reports

Writing a handler in 100 lines of C (on a PC in 2021 🤦) isn't impressive, it would be more impressive if he'd written it in one line in a scripting language. ¬_¬


2:52 nothing big just a bit more than 100 lines


Rare moment of enderman not spending 90% of the video in a vm


If you're reading this, about to comment about how bad of a security risk this is or anything of the sort:

This is functionally the same as a batch file. We don't go around saying that batch files are inherently security flaws. This is just a cool little project that shows something cool you can do with browsers' url input and windows' api.

I personally think this is badass, and learned something about Windows I didn't know before. Gives me some ideas about some other cool things I could do with it.

It's not the same as a batch file, it has SOME overlap in functionality, but it is more than just a batch file. A better analogy would have been Steam or Spotify. As for security, it certainly could be abused depending on the handler. In this (demo) case, a handler than just blindly runs whatever you put in the URI is obviously extremely dangerous, but again, it's just a tech-demo; you'd have to be insane to use it live.

@@user-vn7ce5ig1z I'm not saying it functions AS a batch file, I'm saying that in terms of security, it is functionally the same. Both only reside on a local machine, both are difficult to get someone to use without knowing what they are doing (and a batch file is a hell of a lot easier,) and both have access to the machine almost without restriction.

I'm talking to the people who are saying that all you have to do to perform malicious activity is get a target to click a link, whereas you actually have to get them to implement the "protocol" first. That's where the difficulty lies. And that's where it's less of a security risk than an actual executable would be.


I actually wanted to make a such thing, to open a program from my browser. Now I know how, thanks! ^^


Wow Thanks, this is a good insight in my project.


@@minecraftify95 I am playing minecraft about four years so i know what an Enderman is please do not think that i am that stupid


2:41 bro me too, I don't like manipulating strings in C :(


I actually made a bsod protcol which crashes your pc if you run it. You dont even need to open an elevated browser.


It's like creating a new spell in Harry Potter


you should do the same with powershell !

cool video btw


yeah many popular programs have been using this protocol method for launching programs for years

Yes, and this video shows you how you can make your own.


make a basic operating system, even if MS-DOS based or whatever

@@minecraftify95 Hmm well it's not like almost everyone in the world has played it
Like me

I wasn't trying to be mean I sound like that sometimes if I sound mean I didn't mean it

@@minecraftify95 i missed the part where i asked


You could put a download link for that code. Great idea


Nvm found it, labirynt, ncs. Shotout to the homie from live chat


Yes, you don't need the slashes at all, a single colon is sufficient for Windows to recognize it as a URI scheme. In fact, if you add two slashes, Windows will append a trailing slash: "cmd:"→"cmd:", "cmd:foo"→"cmd:foo", "cmd:/foo"→"cmd:/foo", "cmd://foo"→"cmd://foo/", "cmd:///foo"→"cmd:///foo".


When I started watch video, feel like I m in Tomorrowland 2021 Fest


jdh designed his own cpu and coded a game for it


Can you please share a link to your C code which you used in this video?

There's no point, there is no universal handler; just write your own and make it do whatever you want it to do.

just past this<br>cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"

just past this
cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"


That's cool..
I can imagine how many things work..
The browser probably do what you did automatically with protocols such as http..
Other applications probably do the same with their own custom protocol..
I don't really know.. But, this how it could be.


Me not understanding whats going on but still likes the video


I actually used Python, it did not work. I used another Python program to output arguments.<br>The reason it was not working was no arguments were passed when I ran the program to output args. The arguments checker only was 40 lines while parser was 37 lines.

I actually used Python, it did not work. I used another Python program to output arguments.
The reason it was not working was no arguments were passed when I ran the program to output args. The arguments checker only was 40 lines while parser was 37 lines.


You can try out cmd&cmd bug with command prompt that will corrupt commands


Next video "How CIA agent come knock on my doors"


Perfect, now i just need to make a script to set the registry and parser and i have my rce cmd prompt through browser


2021: I made my own protocol
2022: I made my own browser app
2023: I made my own computer
2024: I made my own robot
2025: I made my own tech company
2026: I made my own country
2027: I made my own planet
2028: I made the whole entire universe

2050: I made my very own human

2090: I builded a mind-AI robot

9999: ????


I'm having fun even though I don't understand anything


This vídeo is the reason why i am awake até 5pm doing my Node.js URL parser


Aren't protocols designed primarily for security purposes? That's what I learned from my 4 years of CS degree 🥲


The protocol I helped write (MQ) is covered by a RFC (Request For Comment)

Cool. Do you mean IBM's MQ or MQTT? What's the RFC number?


Old version of windows in the VM, you didn't update it since 2018?


this is actually good. i was looking for exactly same to open my app from url. Thanks


I KNEW I wasn't the only lunatic with the taskbar at the top!!!


Someone: Now I can access all of yo-<br>Enderman: Stop right there, I will disable this after this video.

Someone: Now I can access all of yo-
Enderman: Stop right there, I will disable this after this video.


Hey what's your host PC wallpaper ? Can you maybe reply with a link. Thank you!


what is the point of making a con folder on the dekstop

what is the point of *making a con folder* on the *dekstop*


am i the only one who wants to know what song is playing in the backround?<br>btw pls tell me what song and what reamix that is

am i the only one who wants to know what song is playing in the backround?
btw pls tell me what song and what reamix that is


2:52
Around 100 lines, in just about an hour.
People who code: Not Bad, Kid.
People who don't code: DAAAMN

* People who code: WTF are you using C on a PC in 2021? 🤨

C should be relegated to embedded systems, micro-controllers, and system drivers. ¬_¬


"It's not that big, just a few hundred lines"

Because he's using C… in 2021… on a PC (rather than an embedded system or micro-controller). 🤦 This is why God invented scripting languages where you could write a handler in literally one line. ¬_¬

@@user-vn7ce5ig1z Bruh I didn't know that and you're being mad at me....


@@minecraftify95 Dude i dont have a life i play minecraft 8 hrs


Chrome is the most ram intensive browser that i choose to run edge instead of it but besides that it's a good html viewer and pdf player lol


I must finally learn advanced C++, 'cause I know only basics and object basics for now. Today if you would ask me to make something like your parser, I would go with C#.


Now I know where I should save my 3TB of homework file


You are crazy...

In a good way of course


i like how i can somehow only watch your videos without an internet connection.


pov : ur a grandma and your grandson is turning the pc on and off


Me when my parents see me changing the WIFI password


Its scuffed that it dosen't give you the UAC pop up to confirm starting a command line as adminsitrator


OMG that’s a disaster from the security point of view. Now you don’t need any RCE vulnerabilities, you can just execute what you want on a remote machine 😂


Do a speed run of you coding a app. That will be an interesting thing to do.


Thanks, this helped me deconstruct a protocol i was looking for.


As for me, I made my own Web browser.

Not using any Microsoft RAM hungry Web-based control, nor any Chrome-breathing products shoved by Google in everyone's face. Just a fully working web browser made in Visual Basic .NET, since 2009. It has a Internet Explorer 2.0 level of render, but it works fine.


is it possible to start a recursive cmd opening loop through that?


0:09 "Process Hacker" and "Uninstall Tool" hmmm seems sus

How so? 🤨 The Uninstall Tool is a development tool and Process Hacker just lets you get information about and manipulate processes running on your system (I prefer Process Explorer and Prio).


I'm actually not surprised at all.

But here I have a question. I had similar issue with the context menu command, You had with Your protocol. I wanted to make a context menu that would would open a a webpage on specific browser with specific address, but with part of it being a filename without extension. But I couldn't do that right.

For example, I wanted to make "Open in Webpage" menu option that would open www.website.com/filename in Opera. But all I could do was to open the www.website.com/filename.ext which killed the purpose...


less go skids got new food to eat (abusing the vulnerability hard)


Useful, for example Microsoft use this in their site


Bro, How many programming languages do you know?


Windows did not changed in that aspect since Win98.


You should to try to code a game onetime


This isn't a true protocol.<br>You are just adding a vulnerability to your system

This isn't a true protocol.
You are just adding a vulnerability to your system

Correct, it's not a protocol, it's just a URI handler.<br>Correct, it's a vulnerability, but that's just because it's just a test demo. A real handler would sanitize its inputs.

Correct, it's not a protocol, it's just a URI handler.
Correct, it's a vulnerability, but that's just because it's just a test demo. A real handler would sanitize its inputs.


I'd love to have a cmd:// protocol built into windows


av u got text version of this tut?? i want to do it but video goes too fast


Andrew do you remember u made a alphabet video with disk drives<br>Could u make a video how to move space from 1 disk to another (in my case from disk F: to disk C: )

Andrew do you remember u made a alphabet video with disk drives
Could u make a video how to move space from 1 disk to another (in my case from disk F: to disk C: )


If This madman got an idea, he dkesnt stop until it works, so enderman is pogchamp


Watching this video really made me 'upside down'


Does this work on a school pc where cmd is off?


This is how my grampa views me by changing the BLUE  screen of the tv into youtbe


what's next? You will make your own contry?


It can be whatever you want, it's just a program like any other. But yes, the handler can be as little as a single line of code (or even nothing at all, it can literally be a program that does not hing and exits if you want). 🤷

@@user-vn7ce5ig1z Thank you for answer. But, all lines in video you can type in single file because is everything pre-build in C language.


Noice idea but why sharing it on youtube but not sharing the programm ?


can software make those changes in registry without administator perms?

I don't think so. Without admin rights you can't even edit values in regedit. Those limitations apply to other programs, as I would imagine.

I don't think there's a way to do that without injecting into system files (which is a pain in the ass and you'll have to break the WiNdOwS aUtOmAtIc RePaIr as well because otherwise it's gonna fix the system on the next restart)


Thanks! I used it to make a "vscode" link for VSCode Insiders


I run MEMZ in Windows 11 what a big brain


Finally, now i can make an rickroll:// protocol

You can, but good luck getting people to install it on their systems so that you can use it on other people.


Is there any docs that I can use to copy the code?


He just did; did you not watch the video? 🤨

@@user-vn7ce5ig1z i want his brain... all of it.    :)


What's the best way to start learning how to code<br>edit:Well whatever Enderman does in his videos

What's the best way to start learning how to code
edit:Well whatever Enderman does in his videos


Congratulations you made history. Now we need to make you a new Wikipedia page


I've been thinking about doing something similar but on Linux for a bigger project I plan on doing. Just something closer to HTTPS.


This man is your 8-Bit Guy but is 64-bit


still wondering why youre australian on your youtube info page


i understand why PowerShell doesn't have a protocol<br>because that could open a huge security issues

i understand why PowerShell doesn't have a protocol
because that could open a huge security issues

Really. You can turn off, activate, DeStRoY windows by opening link

@@kukuruzka and websites can trigger that protocol to do something harmful if the user is unaware of what he's clicking on


This is like my mom viewing me while I am using pc


best of all is ... you can write on any URL even the windows explorer ... right?

Yes, Windows treats URI schemes like any other file extension.


2:55 i love him say not that big just more than 100 lines

@@icantth1nkofanam40yes but strings is a pain


Next recreate TCP and UDP but in assembly :troll:<br>But nice work!

Next recreate TCP and UDP but in assembly :troll:
But nice work!


And THAT IS WHY YOU DONT CLICK ON THE SKETCHY LOOKING LINKS YOU SEE ONLINE


how can you write code in C with visual studio?


Man, you could make a program to automatically create local protocols just like you did, with a cool interface for the user create its own protocols easily without have to code and edit registry, just for noob users like me!

Or just a program to install the protocol that you made, and this program could also remove that cmd window that opens before the action and stay behind it until you close it. Cool idea bro, you inspired me!


Did you by any chance see if there was a `%2` or `%3` that only passes the payload?

The entire URL is passed as a single command-line argument.

just remove begin and end of url<br>cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"

just remove begin and end of url
cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"


i created this in python aswell, works as intended lol


Not a protocol, as others stated. Why?

Does it describe common means for discrete objects to communicate with each other?
No

Does it define rules, syntax, semantics and synchronization of communication and possible error recovery methods?
No

Does it describes how the algorithms should be used and includes details about data structures and representations?
No

Does it define means for isolated entities to form a decentralized network?
No

By any means possible, it is not a protocol


wow dude really great tutorial. Lots of love from BD


When you see a video with 2160p60 4k quality...


The amount of safety nerd's who think they were handed the knowledge goblet by Jesus that are in the comment's is just insane.


Next Video : <br>I tried to make operating system

Next Video :
I tried to make operating system


cmd protocol supposedly never exist for security reason<br>and you know what will happened if this thing exist...

cmd protocol supposedly never exist for security reason
and you know what will happened if this thing exist...


ThioJoe mentioned you in his video about URL protocols.


1:NIVIRO-The Labyrinth<br>2:Robin Hustin x TobiMorrow - Light It Up

1:NIVIRO-The Labyrinth
2:Robin Hustin x TobiMorrow - Light It Up


Can you share both the programs on your website?


Слушай , Эндер , а когда ютуб введет функцию чтобы переозвусивать видио ты ее зделаешь?


Cool tutorial, can you now place that grass block back?


can i launch any program i want with this? i it would be awesome to make a few protocols for .exe files i use regularly and execute them from within my browser


Why? Just write your own and have it do whatever you want it to do (or even do nothing at all). All you have to do is strip the scheme name from the only argument that gets passed to it.


Pretyy good dude! Somebody Know name of the wallpaper? Thks


Guy turns his browser into a terminal, has technology gone too far? Is javascript the mark of the beast? Find out on the next episode of Poettering's Bizarre Adventure!


"The code isn't that long, just about 100 lines" <br>Me: 100 lines!? I could never write one line without quitting bc I can't write code 😂

"The code isn't that long, just about 100 lines"
Me: 100 lines!? I could never write one line without quitting bc I can't write code 😂

Well I couldn't drive a boat for 1km since I don't even know how to start it but that doesn't mean it's not a short distance for an experienced driver


Holy... with this we could use chocolatey commands to install anything with just a click


Completely ignoring the fact people can now hyperlink you to for example execute a remote shell


Wow Es Una Idea Que Yo No Creía Que Existia Pero El Riesgo Es Que Un Hacker Con Una Dirección IP Falsa Te Ejecute Un Programa Que Haya Descargado


i want to microsoft make a program called Protocol Manager, to create own protocols using GUI


No one gonna talk about the Process Hacker icon on the desktop?

What about it? I prefer Process Explorer and Prio myself, but a lot of people like Process Hacker. To each their own. 🤷


@@dundun3368 idc so shut up, noone asking you


this guy turned chrome to a still useable web browser but to that run app

Except it has nothing to do with Chrome, the URI scheme will work on Firefox, or even in Windows (eg in the Run dialog). So you can still get rid of that virus called Chrome. ¬_¬


they still have the zune protocol but why


Next on Enderman I made the whole observable universe .

@@minecraftify95 I know enderman is a mincraft mob I play mincraft a lot so you are a dumb man to me .<br>Me a 2367 rank hyperpixel  Bedwars player he he

@@minecraftify95 I know enderman is a mincraft mob I play mincraft a lot so you are a dumb man to me .
Me a 2367 rank hyperpixel  Bedwars player he he

@@minecraftify95 boi will you play mincraft win 10 edition with me my gamer tag is Boxycoronet4929

@@minecraftify95 If you will please give me your gamer tag so that I can friend you and play

@@minecraftify95 If you don't play with me I will definitely Rick roll your dumb channel


Alternative title: How to create XSS vulnerability on purpose


I don't think you should describe those as "local protocols" but rather "URI Handlers", that would be the correct name. Although great vid like always!


Bruhh what a legend

This guy could make his own linux OS


how do i download stuff from your wesite all of them is password protected <br>do i have to pay you?

how do i download stuff from your wesite all of them is password protected
do i have to pay you?

fun fact the password for them is on the fucking website<br>to save you some trouble, all the passwords are mysubsarsthebest

fun fact the password for them is on the fucking website
to save you some trouble, all the passwords are mysubsarsthebest


what is the point? for the viruses? for protect?


is it posible to code this paser in python?

from tkinter import Label, Tk

from os import system as s

from urllib.parse import unquote

def args(string=True, mit=False):

    if mit:

        a = sys.argv

    else:

        a = sys.argv[1:]

    if not string:

        return a

    else:

        return str_list(a, sep=" ")

try:

    args = args(True, True)[43:-1]

    args = unquote(args)

    args = args[1:]

    s(args)

    root = Tk()

    Label(root, text="you successfully run: '" + args + "'").pack()

    root.mainloop()

except Exception as e:

    root = Tk()

    Label(root, text=e).pack()

    root.mainloop()

ok es geht!


In python the parser is so easy so i will try to write it in python, (python is my main language and c at second place)


Hey, did you hear that the new YouTube Sans Bold font? It adds the new font, replacing Roboto to the video title. And it's on all videos. Please make a video on that.


very cool
tried it out but without the parser
(i'm to dumb for that)

It won't work without a parser because the system passes the whole URI to the program. (I don't know why it does that, it certainly doesn't <i>have</i> to. 🤷 Maybe it's just for backwards compatibility, like the spelling mistake in the HTTP REFERER header. 🤔)

It won't work without a parser because the system passes the whole URI to the program. (I don't know why it does that, it certainly doesn't _have_ to. 🤷 Maybe it's just for backwards compatibility, like the spelling mistake in the HTTP REFERER header. 🤔)


Or you can just do C:\Windows\system32\cmd.exe /c <argument goes here> instead of coding a parser


Very nice, but it will be better if you are using classical music.


me : open explorer.exe with internet
my pc : wtf explorer.exe is open
cursor : (flashing with load cursor)


it's realy dangerous but it's realy cool and interesting

It's only dangerous because it blindly runs whatever its passed because it's just a test demo. A real handler would sanitize and validate its inputs.


For what, the REG file? That's already in the video. The protocol-handler? That depends on what you want it to do; all you have to do is take the single command-line argument and extract the argument from it, eg substr(arg[1],5) (assuming the scheme is something like "test:" (5 characters) and it's a 1-index language).


im vibin to the music ngl im doing the cat vibe thing


so you culd delete system 32 from a browser that culd be insane


Can I download it or is there a link where I can download it?

Download what? this isn't a thing, it's just a tech-demo. You need to create your own protocol-handler to do whatever you want it to do.


"Internet network protocols refer to data transmission processes between computers, or routers, within a network..."

That's just a handler.. and i was curious how someone would show how to make a protocol in 5 Minutes. too bad


To what end? He already showed you how to install the handler, and you can write your own handler to do whatever you want it to do (or even do nothing at all).


For me it says "Error writing to the registry"


That might be actually usefull to post on troubleshooting websites... and maybe a good prank "virus"

… also a good real virus. ¬_¬

This is just a demo, do NOT make a real handler blindly run whatever its passed!

… also a good _real_ virus. ¬_¬

This is just a demo, do NOT make a real handler blindly run whatever its passed!


definitly a legit coder "OH MY GOD 100 LINES?!?!?!?


u didnt wanna collab with your brother? @Ranboo???


There is no protocol ... just handing request on specific URL scheme (any macOS app do it easily). The P of ftp, http, ... means protocol. mail:// is not a protocol , it's smpt.

Forsooth, technically it's just a handler. Unfortunately, many people misuse many words frequently. 😒 The worst part is when people who don't know better hear and spread the incorrect usage and make it even more spread. 🤦


It's not a protocol, it's just a URI handler


very few people like this
good luck bro
{Greetings from Azerbaijan}


Which one? There were three songs:
• NIVIRO - ""The Labyrinth"
• Robin Hustin & TobiMorrow feat. Jex - "Light it Up"
• Lil Affie - "Trocadero"


Can you do a tutorial on custom responses on protocols? for example: "enderman://channel" leads to your youtube channel ( local ofc ) m, thanks for your awesome content!

handle them in your code char by char, the idea stays the same

@@Endermanch Thanks for responding, but i meant html responses, not external apps or anything, like there IS an exe, but it returns HTML/FILE response

@@the_agent_z No, this is a scheme-handler, not a CGI handler. Your example is confusing anyway. What would other examples be? enderman://phonenumber? enderman://favoritefood? 🤨 If you mean something like yt:enderman, yt:jimbrowning, yt:pappamonkey, etc., then you <i>could</i> simulate it by having the handler strip the scheme name, look up the URL of the YT channel, and run http://<channel>

@@the_agent_z No, this is a scheme-handler, not a CGI handler. Your example is confusing anyway. What would other examples be? enderman://phonenumber? enderman://favoritefood? 🤨 If you mean something like yt:enderman, yt:jimbrowning, yt:pappamonkey, etc., then you _could_ simulate it by having the handler strip the scheme name, look up the URL of the YT channel, and run http://<channel>


If try to don't use the PARSER, 100% worked!


well i wonder if i can make a sonic mania protocol


Btw, at the CMD your mistake is you forgot /k before the command example: cmd.exe /k echo hi

No, because the system passes the entire URI to the handler. Running "test:cmd /k echo blah" would try to run "test:cmd /k echo blah", NOT "cmd /k echo blah"; that's why you can't run the argument directly and need to write a handler to strip the scheme name from the argument.


Linux can do this more easily with XFCE or KDE.


Now a Web browser can be your operating system now that you don't have to go out of chrome to get to a executable or document


i have an idea to code my wifi router and keep a watch on my family and friends or relative who come to my home


this is not a protocol, but a URI scheme.


i made my own cyber attack: cross site cmd injection


Why was this recommended in my notifications


Bruh, this is just an URI Handler, it's more like a shorcut in your desktop than an actual protocol. It's offensive to call this a protocol.


That ain’t a protocol, that’s a URL scheme!


Omg I like the song sooo much what is it’s name 2:50


who here remembers (And Still uses) gopher:// ?


Am I the only one who hasn't ever seen him in your notifications?


This song slaps, I need it. What is the name? 00:00

NIVIRO - "The Labyrinth"

You should call the police, slapping is assault.


please send us a download link for parser PLS


2:47 In Linux you could have used a shebang with python

In Windows too. Using C on a PC in 2021 is overkill and unnecessary and just begging for bugs.

@@user-vn7ce5ig1z Windows has `assoc` right?


music gives me strong 2010's vibes
i like it
song name pls?

Also:
• Robin Hustin & TobiMorrow feat. Jex - "Light it Up"
• Lil Affie - "Trocadero"


i made a custom protocol to open vlc from browser and a userscript that injects the button on the website.

not like i ever used that button though :D

<b>*Me using nasa radar dish to find who tf asked*</b>

**Me using nasa radar dish to find who tf asked**

@@zombs0 you don't need to be that toxic


If this was on Linux it would be even more vulnerable.

@@mrcxlinux Yes but they could use the browser agent to run the right commands.


you should also try to upgrade from windows 10 to windows 10 :D


You can send me the Debug.exe and Parser.exe with Debug and done Parser.exe??????????????????????????


Man, i think it could be possible to have chrome ommnibox engine in place of stupid Windows search. I just wanted to click that search button on taskbar and have this sexy omnibox to open programs just like Windows search, work with custom protocols just like type a custom keyword and press tab to search on a site and almost search inside Windows apps or input a command on cmd just like you did with that omnibox. I would like so much a fusion of Chrome's omnibox and Windows search. Just my idea, but they don't give a fuck to users that install pirate versions of Windows.


Very nice experiment but be careful this is highly unsecure. You are basically inviting anyone to execute a command with your profile.

This is DEMO for testing purposes. A real handler wouldn't (SHOULDN'T) blindly run whatever its passed; it would (SHOULD) sanitize the inputs and validate them).


This would be more useful if the stdout of your program could be loaded into the browser. You'd basically have a CGI web server on localhost without the socket layer.

Except that's not what protocols are for, so… apples, oranges. 🤷


1.NIVIRO-The Labyrinth<br>2.Robin Hustin x Tobimorrow-Light it up

1.NIVIRO-The Labyrinth
2.Robin Hustin x Tobimorrow-Light it up


It's not really a protocol it's more of like an alias surely

It's neither of those; it's a URI handler.


yo can you upload how download windows 11 by insider program if you doesn't have tpm?

There are already videos of that. You don't need a TPM module to download the ISO, you only need it to run Windows 11, and even then, you don't need it at the moment (people have installed it without one), but you probably will need one with the final build and the hacks to get around it will likely be patched out.

There are already videos of that. You don't need a TPM module to download the ISO, you only need it to _run_ Windows 11, and even then, you _don't_ need it at the moment (people have installed it without one), but you probably will need one with the final build and the hacks to get around it will likely be patched out.


i took this cmd protocol idea and made a installer for it


You just open the windows 10x calculator what is going on in my head


cmd://<br>looks good i will use it on my website!

cmd://
looks good i will use it on my website!


That is dangerous, you are allowing your web brownser to have full acces tu you PC.


Tbf u didn’t make a protocol… u made a shortcut


bro and what do I have to do to get it back to normal?


Is this possible with Java too? I want to try this one out in Java but I don't know if it's possible

yes i think you can get the argument from argv[0] or argv[1]

Yes, you can write the handler in any language you want, as long as you compile it (you can't run a script directly; the system will throw an error).


hey, can you provide a download link for the parser code? I would like to do this too, but i have no knowledge of c whatsoever...

There's always tutorials online to learn C :D<br>Also, I think he showed it, just pause the video and type it out.

There's always tutorials online to learn C :D
Also, I think he showed it, just pause the video and type it out.

@@yuck871 yeah, but the double equals sign, im not certain about

There's no point to using his demo code, just write your own and make it do whatever you want. The only thing you need to do is to strip the scheme name from the only command-line argument that's passed (or even just do nothing at all if you want).


this guy probably has a degree in computer  science


I didn't know cmd can handle & and |, I thought that was a bash thing

🤨 Even DOS supported redirection since 2.0 (1983), let alone Windows. ¬_¬


Sure, it <i>can,</i> but they're not the same thing; they just have some overlap in functionality, but they each do stuff the other can't.

Sure, it _can,_ but they're not the same thing; they just have some overlap in functionality, but they each do stuff the other can't.


New Vulnerability Unlocked! Run terminal commands from web browser!

I dont see how doing so would increase your attack surface even by 0.00000000001%. I would be WAY more worried about exploits in existing ones like steam, skype, discord etc.


Can this be used to bypass administration privileges or open block apps from a school pc?

If you don't have admin privileges, then you can only add the URI scheme to your own user account's registry (HKCU), not the system registry (HKLM), so when it runs, it would run with your user privileges, not elevated privileges. For all intents and purposes, it's limited to whatever you can do by using the Run dialog.


2:48 "I don't really like manipulating strings in C" then why did you do it in C?

The only completed code that he found on stack overflow was in C lol

Why indeed. Who uses C… on a PC… in 2021? 🤨 C should be reserved for embedded microcontrollers and system-drivers now; use scripting languages for everything else.


@Enderman really made ctrl+c and ctrl+v impossible huh, (I wanted to copy what he was doing but I got stuck)


its official<br>we can replace windows shell with browsers

its official
we can replace windows shell with browsers

theres another registry key for that<br>you can change the shell from explorer.exe to something else

theres another registry key for that
you can change the shell from explorer.exe to something else

@@zombs0 cmd

No really, in fact, hacks like the utilman hack have been around for decades.


No, this is how Windows handles URI schemes. Mac uses a completely different method (and doesn't have a Windows registry, obviously).


tehcnically a uri scheme handler. This is what steam uses to launch games.


I made url parser in python and work fine


Try doing a video about this "desktop goose" it's hilarious.


Roblox uses the roblox-player:// and roblox-studio:// fyi. Nice vid, could have some security issues though.


I cannot wait to remove system32 from my web browser!


Excellent

Can we do same in macOS

Thanks


are you aware that attackers will exploit this stuff to do harm to the computers?

@@minecraftify95 oh lol. you just copy pasted it or rewrote my comment (my guess)

I dont see how something like this will lead to you being hacked.


I found out how to make objects too!
A txt file with name Hello

prompt>> hello.txt


This is just a ploy for him to get cmd access to all of our computers 😳


Who else came from the noescape creepy pasta cuz they got this dude in their recommended now


what happens if i send "minecraft://minecraft.exe" ?


You can use whatever you want, but it won't work unless your handler parses it. The system passes the entire URI as a single command-line argument, so if you run "test:cmd.exe /c echo foobar", it will try to run "test:cmd.exe /c echo foobar", NOT "cmd.exe /c echo foobar".


linux's customize protocol! just like this, search xdg, application file!


(before watching the vid: I actually knew how to do this using regedit)

<b>*Me using nasa radar dish to find who tf asked*</b>

**Me using nasa radar dish to find who tf asked**


anyone else just here for the great music?


Is there a way to make this work cross-platform (windows & linux & mac)?

Yes and no. Other OSes use their own methods of handling URI schemes (and obviously don't have a Windows registry), but you could port the handler to other platforms. How do you think Steam, Spotify, etc. work on other platforms?

@@user-vn7ce5ig1z That was my question. What would you have to tweak in Linux, for example, to get the same result? Though it's true I have worded it as a "yes/no" question


@@user-vn7ce5ig1z yeah I know it’s nothing new but you just don’t wake up thinking “alright I’ll make a protocol”


Great idea man.. its just i dont want to spoil it but this was nowhere close your protocol nor even something related to networking*. You haven't even touched the networking layer, this is just integration of bash commands for a browser, its application layer, local to your pc...


Yes  I need to be less stupider to actually run my VM programs on my navigator.


Where the hell does he get his music from


Bruh 2:53. 100 lines is a lot of code. It even looks like a lot.

Because he's using C (in 2021, and on a PC rather than an embedded system or microcontroller 😒 🤦). You can write a protocol-handler in a scripting language in literally ONE line of code (but you have to compile it; you can't execute the script file itself).


The title is misleading. You didn't make a protocol, you created an alias and bound it to a stupidly simple executable to manipulate strings. What you achieved to do, however, was clickbait.

Come back when you actually implement an application layer protocol on top of some transport like TCP or UDP, or even better a transport protocol on top of IP, because what you did here is NOT a protocol (especially since you mention HTTP)


Made a script:// protocol in Linux, i didnt know u could do on windows


Yo my mom found the boot loop and she thinks the usb dosen't work


Так мы узнали что ты из Обнинска) Или недалеко, в Калужской области


HKEY_CURRENT_USER\SOFTWARE\Classes works to as well as HKEY_CLASSES_ROOT


Hey #MRGenius why don't you create your own OS?
Then Microsoft be like 😫😫


Description
.....ng to show you how I made my own protocol in Windows. Making a protocol isn't difficult at all. The problem is the parser that requires you to have programming knowl.....
Me
What the heck is parser?


Make a Windows 11 vs Windows 10X video! Idea for a video.

Stop. Windows 11 will be introduceed today. Officially. Time is so fast


Could've just used something like Nirsoft URI viewer and I don't really see how this is a good idea, people try patching ACEs triggered by URIs while you do the opposite.

This is a good experiment and way to learn how to implement URIs in your app, but definitely not a good example.

It's a DEMO. Obviously you wouldn't use a handler than blindly runs whatever its passed in a real example. (At least, I would hope not. 😒 Sadly, I know humans too well to expect better. 🤦)

@@user-vn7ce5ig1z Well, I've seen people who are absolute dumbasses, Enderman is not one, he, flytech and similar YouTubers are very clever. But still.


can you please just export the "cmd"  Key and link the .reg file in the description 😅

Edit: and that C code too...


Why did you code in c? It's a primitive language. If you had coded in c++ it would have taken you 4 lines of code!


I totally do not understand anything but the video is cool so yea


I will make my own protocol called NGGUA means (Never gonna give you up)


Modify win10 or Winpe 10 and name it EnderOS!

I doubt he could do that it would be easier to just make a linux distro instead it would still be really time consuming

@@killertigergaming6762 yea but it will be more interesting

@@BittyDaProto maybe i think it would be a lot easier making a linux distribution since its less restrictive and he can do more


I'm impressed, it's through not particularly convenient to use.

Imagine people installing a malware just by redirecting you..


Love and  support from Pakistan bro keep it up


Danke YouTube Algo. Inhalt komisch, Musik 10/10


One Day A Man Decided To Go To The Store To Get Some Milk But Then He Realised The Store Had No Milk Left So He Went To Another Store But Again The Other Store Had No Milk Left So He Just Decided To Go To The Other Side Of Town To The 3rd Store Nearby But Again No Milk Left And He Was Frustrated So He Just Decided To Go Home With No Milk And Wait Until Tomorrow And Then He Woke Up To Get Dressed And Checked If There Was More Milk At The Stores(live )


Make a one that allows you to run cmd prompts in browser (alllllll the cmds)


Time to make hppts:// and confuse some people


Alright, by the way what's the purpose??


I made the rickastlley:// protocol with this


is this parser file public? if yes can anyone pls send me a download link?


that aint protocol scrub, it is just handler


Well he would need to get a Mac to be able to do Mac stuff, or he could just "hackintosh" some hardware together. As for Linux, the only thing he needs to do is open up the terminal and type in "rm -rf"


Enderman when you will make your own virus?

He made No Escape.exe, are you the new came to this chanel?


Thank god you have a yes or no prompt before executing it


with C# that would have been less than 100 lines lol

<b>*Me using nasa radar dish to find who tf asked*</b>

**Me using nasa radar dish to find who tf asked**


The song is so so great!!!!!!!!!!!!!!!!!


How to make a security hole as deep as Mariana trench on your system 101, I mean overall video was cool, but please dont keep that on your system, REALLY


cool, but I dont want it. I have a terminal, as im a Linux user. its fun when you write it and know it yourself, but the fact someone could install a new protocol alongside a program you just installed and unkowningly added a protocol of unkown uses... im happy the browser asks for permision. NEVER TURN THAT OFF... for the love of your pc..


Бро, всё намного проще
cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"

You can just paste this


I guess you don't want help to fix it, otherwise you'd have been more specific about what went wrong. ¬_¬


I have already done this years ago actualy


Please publish the source code of your programs!


No, you need <i>your</i> code to create your own protocol. ¬_¬

No, you need _your_ code to create your own protocol. ¬_¬


Hey enderman try to make A Operating System?


4:14  Россия проникла в браузер.

4:14  Россия проникла в браузер.


Where. Is. Voiced vid? The first voiced was amazing and got really nice, no reading or anything like that, just watch

@@Endermanch nice, it's really easy to watch, i do not like to read during the vid. also a little question, what language is noescape.exe wroten?


Why would you use windows anyway? macos better


if you do like : cmd.exe /K echo a its executing "echo a"

No. Running "cmd:cmd.exe /k" echo will try to execute "cmd:cmd.exe /k echo" which won't work because that's not a program. That's why you need a handler to parse the argument to extract the command (or strip the scheme name). To be clear, "cmd:" is NOT a program; you could change it with anything else, eg: "test:cmd /k echo" and it will try to run "test:cmd /k echo", NOT "cmd /k echo".

you need to remove begin and end of URL<br>cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"

you need to remove begin and end of URL
cmd.exe /V:ON /k "set test="%1" && cmd.exe /c !test:~7,-3!"


Maybe you won't want to open ms-cxh-full, to anyone planning to do so. Just a lil warning lol.

@Sarvesh EB I tried 😂 . Took me 15m to deal with it.


9 minsa and 2.000 wievs?!? THATS AWESOME


Or you can make your own os<br>There is already the Amogus OS

Or you can make your own os
There is already the Amogus OS


@@minecraftify95 dude stop your like everywher in the comments section


To what end? There is no universal handler; just write your own to do whatever you want. All you have to do is to strip the scheme name (and colon) from the start of the only argument that gets passed to the program then do whatever you want with it (or nothing at all if that's what you want).


Good job adding the warning, but please, please don't do this. You can add the ANSI code for "COLOR: black" in a comment and then put malware in a link.

This is just a demo that blindly runs whatever its given; a real handler would sanitize and validate its inputs.

@@user-vn7ce5ig1z i was saying, i see some people do this because they think it is easier for them to run cmd commands. anyone that uses this, go to cmd://echo%20hi and you'd understand, that can be hidden in a link for example


can you put the windows 11 iso on dl.malwarewatch.org/windows?

Wait less than 18 hours ;). Then download it from official Microsoft website

@@kukuruzka microsoft website dont have it lol

@@KingdaStudios today at 11! Am utc Microsoft will release it

@@KingdaStudios check their twitter for more information


I think these protocols aren't useful. Who wants to open the calculator from the browser?


Hey can you tech me your computer skills please i really want to learn it ♥♥♥♥♥♥♥♥♥♥♥♥♥♥

That dosnt work like that he cant just teach can you even make a vm?!

@@b0rtew2ki97 hey bro I din't mean I don't. Know anything in computer
I can make a VM! and I am programer
I know JavaScript HTML CSS  C++ and all
I just tested ender man to reply . 🔥


Soooo Cool BUT ITS SO EASY MAN HAHAHHAHAHA :D its realy cool i made it too


Enderman you speak russian? or you know russian


YOU DIDN'T MAKE A PROTOCOL. You want to make one? Ok... Go to school and study computer science. This is just an handler in windows


I made a custom mvp:// protocol to open an mvp window with the the url as the file! Very useful for my local media server's web interface.


make your own operation system

idk if you accept ideas

if not, this is prob your idea and you wont be doing this because I said the idea


So did Terry Davis, and look how that worked out for him. 😒

@@user-vn7ce5ig1z nah temple is is the best od


Why bother? When you can press win+r and get the same result. :P

Because they're different things that have SOME overlap in functionality. Just because <i>you</i> can't think of a use doesn't mean there isn't any.

Because they're different things that have SOME overlap in functionality. Just because _you_ can't think of a use doesn't mean there isn't any.

@@user-vn7ce5ig1z Can it delay data flow or modify it. If so please add me on discord... Oliver-#1590

@@user-vn7ce5ig1z Give me an example of a use then, please.


hey mate i got intreasting file form my onedrive (wich i forgot where i got that file)
.849C9593-D756-4E56-8D6E-42412F2A707B
i donno what is this but i want you make this video


windows defender: finally chrome is a virus use edge
user : edge is also a chromium based browser
windows defender: hack tool: chrome
user: 🤬🤬🤬🤬🤬🤬🤬🤬


nice but i sub to you and that great for u


Is there away to make a autorun usb drive to run with out enabling administrator like it does when you plug in your usb drive for your cordless keyboard and mouse.  Is that even possible.... your the best technician hacker on YouTube... I've liked and subscribe/share. Please help. Thanks.


Сколько тебе лет?<br>Просто интересно

Сколько тебе лет?
Просто интересно


4:14 русский текст!!!
Изменено: ты кстати русский и поэтому это неудивительно:)


Хмммм... Неплохо!

Хмммм... Неплохо!


Чел я знаю что ты русский, тебя сильно палит акцент на стриме.<br>Dude, you are Russian, the emphasis on the stream shines on you

Чел я знаю что ты русский, тебя сильно палит акцент на стриме.
Dude, you are Russian, the emphasis on the stream shines on you

He's using a Swiss domain, so I'm assuming he's Swiss.


chica you need to learn what a protocol is this is by definition not a protocol


I guess you don't want help or else you would have been more specific about what went wrong. ¬_¬


THIS IS TOO AHRD I DOTN GET ASINGLE THIGN


can you put the debugger.exe in description or on your website ?

It's just a demo (and one that's dangerous to use for real). Write your own and make it do whatever you want it to do.

@@user-vn7ce5ig1z but how do i make one ?


This has nothing to do with creating your own protocol.

Nope, it's a URI handler, but all the people who don't know different will call it a protocol and spread the error. 🤦

@@user-vn7ce5ig1z Yeah, I'm still concerned that the creator of this video did not change the title for clicks.


Um, did you watch the video? He explained how.


enderman in 2021 : making my own protocol

enderman in 2022 : making my own operating system

enderman in 2023 : Making my own Human


Great videos! Keep it up Enderman! Place minecraft:endermanchs_pc down and do some coding

All MC blocks have the 'minecraft:' prefix for mod compatibility.
This is useful for when two blocks from different mods have the same name.
Since this is not a vanilla item, this would need something else.
Maybe "enderpcs:'?

@@minecraftify95 Thing is...
For this to work we need to have a usable block...

With an actual PC, like a VM.
How?


4:14 я знаю ты русский

4:14 я знаю ты русский


пожалуйста добавь субтитры тебя русские смотрят


Lol I don't understand anything on this vid