Diving into Windows Keyboard Driver 

This is mind blowing. The fact that you can just modify the kernal on the fly through a serial port is crazy. Wow.

i didn't even know you were allowed to debug the kernel that easily nice video!

I don't think I've ever seen such a concise and easy to follow explanation of low-level stuff like this. Very, very cool!

Reminds me when I used to do assembly in DOS. I used this port to detect a keypress instead of using the BIOS int 16h keyboard services

If I remember correctly, osdev may also mention about a specific byte sequence you send or read from ps/2 keyboard in order to initiate system reboot, which is often used in hobby kernels and I guess I've even seen it in linux somewhere

Very nice demonstration of debugging a remote Windows machine :)

Bless you man! You explained how to connect and debug Windows in 10 minutes! Always fantastic! 🥳😀

Nooo, windbg😢. Haha lol, its almost amazing how the app became a meme. Jokes aside, this is actually a very good video. You have earned a new subscriber.❤

i dont understan anything but im still watch all vid

Thanks for the video it's great how you make complex low-level stuff so easy to follow! Thanks!!

Thanks for yet another educational vid, Nir!

Yo I didn't know my pc had an entire PS2 just through port

thanks bro, really nice demonstration of windows driver debbuging, love it !!!!

Thanks for this, TIL OS dev wiki.

As always , concise video debugging low-level code , I am really curious how have you come about learning "low-level computing" and how have yoi built the experience ? was it Computer architecture courses at Uni orworking somewhere where you were involved in that field ?

I didn't know that WinDbg contained an assembler, that's so neat!

If you don't already have a job at Microsoft then you should man. Great stuff.

yoo new keyboard layout wertyu

this is what we need in this community!!

Short and precise demo of reverse engineering the kernel with ASM. Amazing and entertaining stuff!

Smart.... Brains.... (Bugs Bunny reference 😄). Awesome work! Cheers🥂

That was fun to watch and I dont even code, thx

I would recommend making a video about hypervisor internals

Never knew debugging the kernel was that easy. Nice video, you've got yourself a subscriber!

Great primer!

I did engineering work where I had to do alot of copying and pasting, well the ctrl+c failed alot and didnt know if I copied or not.. so made a program that would listen to my keyboard and show green in taskbar if I pressed ctrl+c or ctrl+v(paste) lol... and it helps.. well I student at university I was reminded him saying that they make ctrl difficult to press as in previous gaming it could be pressed with other buttons that disrupt the gaming so you really need to press it hard, my current laptop didnt needed a hard ctrl press but now it does for copy and paste what a shame... and if the manifacturers are really doing that to people do stop that garbage and make the press easier even for ctrl...

You can create enigma codes with this.

Is there a point to it ? No. Does it make it more interesting? Yes

never thought someone would explain assembly and i'd understand it (idk assembly)

this is cool

fantastic!

Awesome video bro

Neat! Maybe cleaner to jne over the increment and have them both use the same ret, no? xD

I didn't even know you could hook Windows' kernel debugger on retail after Windows 98, let alone retail Windows 10. I imagine there's a fair number of failsafes and hardware-level mechanics to keep you from doing anything super fun with it, like Commodore-style cheating like the olden days, but it's still neat.

This is super fascinating! I have a bit of experience with x64 assembly but I don't really know how drivers work. I always wondered what the kernel debugging was for and if we can use it. Can we also debug the kernel of an installation on itself without a VM?

subscribed forever

I hear "screw up" - I watch video until the end🗿

it's a good video with simple explanation but i hope that you do a video about the execution flow and the pe/mz format it's weird format to me. elf is easy understandable. but windows has weird executables they store charachters as if they were 16bit not 8bit and things like that....

This is next level shit. I love it.

Wow, this was almost impossible to understand. I imagine debugging a graphics driver…

you don't see this type of content anywhere on youtube

That's awesome! I'm wondering though why when the cmp instruction was set the address jumped from ...64 to ...68? It doesn't seem like the instruction is using any large values to fill up what I presume is 32 bytes (ig each address can store 8 bytes but please correct me if I'm wrong).

This video is awesome, I learned a lot, but how are we gonna pretend that most motherboards in 2024 have serial ports 😂. My X99 board from 2014 doesnt even have one

Hello!! can you tell me if its possible to "emulate" (Change) the status of an gamepad joystick?? I wish to use two of them, but they both assign to the same buttons, but I wish they were 2 separate controllers so I could use 4 "analogs" instead of 2. Thank you so much

Something tells me the peanuts in MS support aren't exactly diving this deep into your issue when you call Microsoft for support 🤣

cool - i wonder if malware could abuse windows Debugging on a windows VM

Where did the extra space after the ret instruction come from? Was the driver compiled like this?

nice video! tho i think it would be safer to push/pop flags since ur adding a cmp, right? but who cares for a quick demo lol

funny that I get this recommended to me, given that I've had to write custom keyboard drivers for NT4 (on PowerPC) recently, and kbdclass expects to receive PS/2 scancodes so I had to convert USB HID to PS/2 scancodes...

Why did they add the padding to the functions?

How will it error out once the register overflows when you press the last mapped key and it increments it by 1?

I didn't understand the last part, why it won't show the next char in ASCII, but the next chart on the physical keyboard

I find it very unecessary to login into windows, let alone in a VM, But ok. Cool video

Not sure if this is a logical question, but can the debugger debug itself in the kernel scope? Or does that even make sense?

1:02 whats the other driver then?

yoo!!!

I’ve noticed one thing, you seem to press pretty danged hard on keys and buttons every now and again.

why not: jne f+c inc al c: ret

How to remap Copilot key to R Ctrl key on newer windows laptops? Custom drivers or registry hacks? PowerToys works but doesn't work on all apps.

So, now remove the input lag from USB drivers nyeeeehhehe if it were that ez

What

Screw up some linux stuff next, please.

yay, i am first

Can you stop ending 99% of sentences with a high note?