curlLOLBIN
HTTP client to test payloads (traversal, webshells, RCE).
Legitimate system binary (LOLBIN): not an offensive tool as such, but an attacker leverages it because it is usually already installed and raises fewer suspicions than dropping a dedicated tool.
A command-line HTTP client, essential for testing the web by hand: send parameters, headers and cookies, upload files and fire LFI, traversal, XXE, SSRF or webshell payloads. The --path-as-is option stops it from normalising ../ paths.
Family Access, shells & transfer
Flags --path-as-is -s -X -d -H
Concepts Local File Inclusion (LFI) & Path Traversal, File Upload to RCE, OS Command Injection
Cheatsheet LFI / traversal / RFI
Installation
sudo apt install -y curlUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AdmirerHackTheBox
- AlertHackTheBox
- AmaterasuProving Grounds Play
- AmbassadorHackTheBox
- ApexProving Grounds Practice
- ArcticHackTheBox
- AuthByProving Grounds Practice
- BackdoorHackTheBox
- BackendHackTheBox
- BartHackTheBox
- BastardHackTheBox
- BigPivotingDockerLabs
- BountyHackTheBox
- BountyHunterHackTheBox
- BuffHackTheBox
- BullyboxProving Grounds Practice
- BuscaloveDockerLabs
- Cereal 1VulnHub
- ChemistryHackTheBox
- ChocolateLoversDockerLabs
- ClueProving Grounds Practice
- CockpitProving Grounds Practice
- ConsolelogDockerLabs
- DevelHackTheBox
- DomainDockerLabs
- DVR4Proving Grounds Practice
- FanatasticProving Grounds Practice
- FishProving Grounds Practice
- GrannyHackTheBox
- GreenHornHackTheBox
- HawatProving Grounds Practice
- HealHackTheBox
- HeistHackTheBox
- HetemitProving Grounds Practice
- HokkaidoProving Grounds Practice
- HunitProving Grounds Practice
- Infovore 1VulnHub
- InstantHackTheBox
- LaboratoryHackTheBox
- LinkVortexHackTheBox
- LolyProving Grounds Play
- MailingHackTheBox
- MantisProving Grounds Practice
- MiceProving Grounds Practice
- MonsterProving Grounds Practice
- MzeeavProving Grounds Practice
- NagoyaProving Grounds Practice
- NickelProving Grounds Practice
- NukemProving Grounds Practice
- OpenSourceHackTheBox
- PandoraHackTheBox
- PayDayProving Grounds Practice
- PebblesProving Grounds Practice
- PelicanProving Grounds Practice
- PermXHackTheBox
- PhotobombHackTheBox
- PsychoDockerLabs
- ReadysProving Grounds Practice
- RedPandaHackTheBox
- ResourceHackTheBox
- ScrutinyProving Grounds Practice
- ServmonHackTheBox
- SickOs 1.2VulnHub
- SightlessHackTheBox
- SlortProving Grounds Practice
- SnookumsProving Grounds Practice
- SpiderSocietyProving Grounds Practice
- SPXProving Grounds Practice
- SquashedHackTheBox
- SquidProving Grounds Practice
- SwagShopHackTheBox
- Symfonos 1 & 2VulnHub
- Symfonos 3VulnHub
- Symfonos 5VulnHub
- Symfonos 6VulnHub
- TrickHackTheBox
- TricksterHackTheBox
- VmdakProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WallpaperHubProving Grounds Practice
- WorkaholicProving Grounds Practice
- XposedAPIProving Grounds Practice
- YummyHackTheBox
- ZabProving Grounds Practice
- ZenPhotoProving Grounds Practice
- ZipperProving Grounds Practice