curl

Transfer data with URLs (HTTP and many protocols).

KaliParrotLinuxlow

pkg: curl

curl makes requests across HTTP(S), FTP and more — indispensable for API testing, header inspection and downloads.

Syntax

curl [options] {url}

Example

curl -sI https://example.com

Fetches only the response headers (-I) silently (-s) — great for header/security checks.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-IFetch headers only (HEAD request).
-sSilent — no progress meter.
-LFollow redirects.
-kAllow insecure TLS (skip cert check).
-X <POST>HTTP method (GET/POST/PUT…).
-H <Authorization: Bearer x>Add a request header.
-d <a=1&b=2>Send a request body (implies POST).
-o <out.html>Write the response to a file.
-x <127.0.0.1:8080>Route through a proxy.
-vVerbose — show the full request/response.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

curl URL

Usage examples

curl -sI https://target.tld

Inspect response headers quietly.

curl -s -X POST -d "u=a&p=b" https://target.tld/login

Submit a POST form.

curl -s -H "Authorization: Bearer TOKEN" https://api.target.tld/me

Call an authenticated API.

Advantages
  • Supports a huge protocol range
  • Precise control of method/headers/body
  • Everywhere, scriptable
Disadvantages
  • Many flags to learn
  • No JS rendering
  • Verbose for complex flows
Tags
#http#transfer#api

Official docs: curl

Related commands

Frequently asked questions

What is curl used for?
curl makes requests across HTTP(S), FTP and more — indispensable for API testing, header inspection and downloads.
What is an example curl command?
A common example is: curl -sI https://example.com — Fetches only the response headers (-I) silently (-s) — great for header/security checks.
Is curl part of Kali Linux?
Yes. curl ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install curl.
What category of security tool is curl?
curl is a Core Linux tool with a low-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →