Skip to content

Latest commit

 

History

History
 
 

Curl

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
images
images
 
 
Makefile
Makefile
 
 
README.md
README.md
 
 
beacon.h
beacon.h
 
 
curl.cna
curl.cna
 
 
curl.x64.o
curl.x64.o
 
 
curl.x86.o
curl.x86.o
 
 
entry.c
entry.c
 
 

README.md

Simple Web Utility BOF

Simple Curl Dialog Box

Beacon object file and associated aggressor to make simple web requests without establishing SOCKS PROXY. Example use case could be confirming outbound access to specific service before deploying a relay from F-Secure's C3.

Compile

make

Usage

Aggressor script included with a command line function and a menu item for more complicated requests.

Examples

Simple request to confirm a 200 response:

beacon> curl https://f-secure.com
[*] Running Simple Web Request Utility (@ajpc500)
[+] host called home, sent: 2882 bytes
[+] received output:
GET f-secure.com:443 
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36
Accept: */*

[+] received output:
Response Code: 200

Simple GET request that prints output (print is useful for calls to web APIs, a bad idea against a Javascript-heavy webpage!):

beacon> curl http://example.com 80 GET --show
[*] Running Simple Web Request Utility (@ajpc500)
[+] host called home, sent: 2880 bytes
[+] received output:
GET example.com:80 
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36
Accept: */*

[+] received output:
Response Code: 200

[+] received output:
<!doctype html>
<html>
<head>
    <title>Example Domain</title>
...