Blog

Keep up to date with the latest offensive security news, knowledge, and resources.

Mar 03, 2023

cURL For The Pentester: Above & Beyond

Nate Fair

Senior Penetration Tester

Did you know you can interact with LDAP using cURL? How about NTLM, proxy tunneling, or domain sockets? A deep dive into some less common and advanced features of cURL, including sending POST requests with a payload file, uploading files to a server, exploiting Spring4Shell, and exploiting SQL injection vulnerabilities using cURL.