curl

Basics

Basic command:

curl https://curl.ctfio.com

POST request:

curl -X POST https://curl.ctfio.com/endpoint_3 -d "show=flag"

Headers:

curl https://curl.ctfio.com/endpoint_5 -H "Show: flag"

Cookies:

curl https://curl.ctfio.com/endpoint_6 -H "Cookie: show=flag"

curl https://curl.ctfio.com/endpoint_6 -b "show=flag"

URL Encoding

Confuse a webserver without messing up the payload

• Set the value to fl&ag without the browser thinking it is a separator.

curl https://curl.ctfio.com/endpoint_7?show=fl%26ag

Example with upstream proxy

`curl --request POST "https://www.google.com" --proxy https://127.0.0.1:8085 --insecure`

Resources

• HTML ASCII Reference

• Nahamsec - Bug Bounty Course