cURL

cURL flags

cURL (client URL) is a command-line tool and library that primarily supports HTTP along with many other protocols. This makes it a good candidate for scripts as well as automation, making it essential for sending various types of web requests from the command line, which is necessary for many types of web penetration tests.

Driven by command line but interaction through command line with browsers such and Chrome or Safari are a critical part of web penetration testing.

PenDraggin@htb[/htb]$ curl -h
Usage: curl [options...] <url>
 **-b, --set cookie <cookie> ('cookie')
 -d, --data <data>   HTTP POST data
 -H, --set request headers
 -h, --help <category> Get help for commands
 -i, --include       Include protocol response headers in the output
 -I, --head          Send HEAD request and only display response headers
 -o, --output <file> Write to file instead of stdout
 -O, --remote-name   Write output to a file named as the remote file
 -s, --silent        Silent mode
 -u, --user <user:password> Server user and password
 -A, --user-agent <name> Send User-Agent <name> to server
 -v, --verbose       Make the operation more talkative
 -vvv --even more verebose - show an even more verbose output
 -X POST, --send a POST request** 
This is not the full help, this menu is stripped into categories.
Use "--help category" to get an overview of all categories.
Use the user manual `man curl` or the "--help all" flag for all options.

Web_Requests_Module_Cheat_Sheet.pdf

📡 cURL Commands – General Use

🔐 cURL Commands – HTTP Headers, Cookies, and Methods

📦 cURL for APIs (CRUD Operations)

🧪 Browser DevTools Shortcuts

cURL supports