curl from Zero to CEH

# Simplest GET — body only
curl https://www.techforge.community/
curl https://example.com

# Show response headers + body
curl -i https://www.techforge.community/
curl -i https://example.com

# Headers only (HEAD-like convenience: often sends HEAD)
curl -I https://www.techforge.community/
curl -I https://example.com

# Verbose: request + response wire details (great for learning)
curl -v https://www.techforge.community/ 2>&1 | head -40
curl -v https://example.com

# Silent body (no progress meter) — good for scripts
curl -s https://httpbin.org/get

# Save to a named file / remote filename
curl -o page.html https://www.techforge.community/
curl -O https://httpbin.org/image/png

# Explicit methods
curl -s -X GET  https://httpbin.org/get
curl -s -X POST https://httpbin.org/post
curl -s -X PUT  https://httpbin.org/put
curl -s -X DELETE https://httpbin.org/delete

# Form-style body (application/x-www-form-urlencoded by default with -d)
curl -s -X POST https://httpbin.org/post \
  -d 'username=ava&password=demo-only'

# Safer encoding for special characters
curl -s -X POST https://httpbin.org/post \
  --data-urlencode 'note=hello world & friends'

# JSON body — set Content-Type yourself
curl -s -X POST https://httpbin.org/post \
  -H 'Content-Type: application/json' \
  -d '{"user":"ava","role":"tester"}'

# User-Agent and Accept
curl -s https://httpbin.org/headers \
  -H 'User-Agent: TechForge-curl-lab/1.0' \
  -H 'Accept: application/json'

# Multiple -H flags stack
curl -s https://httpbin.org/headers \
  -H 'X-Lab: techforge' \
  -H 'X-Request-Id: demo-001'

# CONCEPT ONLY — cloud metadata gate headers (practice against fake-metadata.py later):
#   -H 'Metadata-Flavor: Google'
#   -H 'Metadata: true'
# Do NOT send these at real link-local metadata IPs from a home network.

# Ask httpbin to set a cookie, store it
curl -s -c cookies.txt 'https://httpbin.org/cookies/set?session=labdemo' -o /dev/null

# Send the jar back
curl -s -b cookies.txt https://httpbin.org/cookies

# One-off cookie without a jar file
curl -s -b 'session=labdemo' https://httpbin.org/cookies

# Inspect the jar
cat cookies.txt

# HTTP Basic — httpbin expects user/pass in the path for a 200
curl -s -u user:pass https://httpbin.org/basic-auth/user/pass

# Wrong password → 401
curl -s -i -u user:wrong https://httpbin.org/basic-auth/user/pass | head -5

# Bearer token (any string; httpbin echoes it)
curl -s https://httpbin.org/bearer \
  -H 'Authorization: Bearer eyJhbGciOiJub25lIn0.lab-only.demo'

# Same idea for JWT usage (sending a token) — forging/cracking JWTs stays in authorized labs

# Follow redirects
curl -sI -L https://httpbin.org/redirect/2

# -k / --insecure: skip TLS verify — ONLY on lab hosts you trust, never as a habit on the open internet
# curl -k https://lab-only.example

# Fail on HTTP errors (exit non-zero on 4xx/5xx) — useful in scripts
curl -sf https://httpbin.org/status/404 || echo "request failed as expected"

# Print only the status code
curl -s -o /dev/null -w "%{http_code}\n" https://www.techforge.community/
curl -s -o /dev/null -w "%{http_code}\n" https://example.com
curl -s -o /dev/null -w "%{http_code}\n" https://httpbin.org/status/401

# Pretty JSON
curl -s https://httpbin.org/get | jq .

# Pick one field
curl -s https://httpbin.org/get | jq -r '.headers["User-Agent"]'

# Save body, print status
curl -s -o body.json -w "status=%{http_code}\n" https://httpbin.org/get
jq . body.json

# Status-only probe loop (safe hosts)
for path in /get /status/200 /status/404; do
  code=$(curl -s -o /dev/null -w "%{http_code}" "https://httpbin.org$path")
  echo "$path -> $code"
done

#!/usr/bin/env bash
# Tech Forge — curl capstone (safe targets only)
set -euo pipefail
JAR=$(mktemp)
trap 'rm -f "$JAR"' EXIT

echo "== banner =="
curl -sI https://www.techforge.community/ | head -15
curl -sI https://example.com | head -5

echo "== json get =="
curl -s -H 'User-Agent: TechForge-capstone/1.0' https://httpbin.org/get | jq -r '.headers["User-Agent"]'

echo "== login-shaped POST + cookie =="
curl -s -c "$JAR" -X POST https://httpbin.org/post \
  -d 'username=ava&password=demo-only' -o /dev/null
curl -s -c "$JAR" -b "$JAR" \
  'https://httpbin.org/cookies/set?sid=capstone' -o /dev/null
curl -s -b "$JAR" https://httpbin.org/cookies | jq .

echo "== bearer =="
curl -s https://httpbin.org/bearer -H 'Authorization: Bearer capstone-demo' | jq -r '.authenticated'

echo "== status probe =="
for p in /status/200 /status/401 /status/404; do
  printf '%s -> ' "$p"
  curl -s -o /dev/null -w "%{http_code}\n" "https://httpbin.org$p"
done

echo "done — flags stick when you can re-run this cold."