← All tools

curl

Tool manual · Kali & common usage

Web testing · Beginner · Web testing lane

BeginnerHTTP Client
Authorized usage only. Capture and inspect traffic only on systems and networks you own or have written permission to analyze.

What is curl?

curl transfers data with URLs — the standard CLI HTTP client.

Probe APIs, download files, inspect headers, and test auth on authorized endpoints.

Official website: curl · Documentation

When do you use it?

  • You need Send HTTP requests from the command line.
  • You are following a CYNARKS lab or authorized engagement that calls for curl.
  • You already tried simpler checks and need this tool’s deeper capability.

Who uses it?

  • Security practitioners
  • Students in authorized labs
  • Engineers validating their own systems

How do you use it? (typical flow)

  1. Install curl using the steps below (prefer Kali package or official installer).
  2. Confirm you have authorization for the target (lab VM, own system, or written scope).
  3. Run --help / man (or the Help section) to see current flags for your version.
  4. Start with a safe example from Basic commands against localhost or an authorized lab target.
  5. Record what you ran, what you observed, and any follow-up (filter, report, remediation).

Help & manual (like man / --help)

Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.

  1. 1. Help

    curl --help

    Huge flag set; start here.

  2. 2. Man page

    man curl

    Full manual.

Kali Linux

Preinstalled on Kali.

1. Installation

OSInstallation
Kali LinuxPreinstalled on Kali.
OfficialSee official docs: https://curl.se/docs/

2. Basic commands

  1. 1. Safe example against your own lab data or localhost

    curl -I http://localhost:8000

    Safe example against your own lab data or localhost

  2. 2. Show help

    curl --help

    List flags for your installed version (same habit as man/--help).

  3. 3. Short help

    curl -h

    Alternate help flag when supported.

  4. 4. List all options

    --help / -h

    List all options

Options / flags

OptionPurpose
--help / -hList all options

5. Useful features

  • Core workflow and interface
  • Reading and interpreting output
  • Key configuration options
  • Integrating into a professional workflow

6. Practical examples

  1. Example 1: Safe example against your own lab data or localhost

    curl -I http://localhost:8000

    Safe example against your own lab data or localhost

  2. Example 2: Show help

    curl --help

    List flags for your installed version (same habit as man/--help).

  3. Example 3: Short help

    curl -h

    Alternate help flag when supported.

  4. Example 4: List all options

    --help / -h

    List all options

7. Important notes

  • curl is used by professionals for legitimate defense, testing and research.
  • Authorized targets only — labs, systems you own, or written permission.
  • Prefer reading --help / man / official docs for your installed version; flags change over time.

Related course: web application security · bug bounty hunting · Commands: /commands#burp