Search

Items tagged with: Curl

#curl

#curl

bonus graph: fixed/introduced vulnerabilities in #curl over time:
#curl

Today we celebrate the five year anniversary of #curl's bug-bounty. It has resulted in 69 reported vulnerabilities and almost 80,000 USD payouts. Out of a total of 439 submissions. 86 of them were considered "informative", which mostly means they were handled as normal bugs.

Submit your suspected curl securirty issue here: hackerone.com/curl


curl - Bug Bounty Program | HackerOne

The curl Bug Bounty Program enlists the help of the hacker community at HackerOne to make curl more secure.
HackerOne
#curl

#curl

Apparently San Francisco gets to enjoy #curl command lines in ads...
#curl

They fit excellently on the #curl cheat sheet coaster...
#curl

This box landed on my doorstep. The #curl up 2024 preparations continue!
a big box of "curl contributor" coffee mugs
#curl

#security #MACOS #curl

#tls #curl #ech #encryptedclienthello

#curl

#curl

#curl

I think it is worth for #hyper and the #rust ecosystem to work as #curl backend but not other way around. The only reason for curl to support hyper is to validate that the backend api is flexible enough and to have another "validator" for such interface. But probably it is one of those piece of code that maintainers are happy to push to third parties 😅
#rust #hyper #curl

Today I want to mention how nice #opensource can be! Look at this #cURL issue github.com/curl/curl/issues/13… nice developers chatting on their own time about code and features with reproducible code and respect in mind! 😭 this is what I am here for!

Write function callback is called twice after resume transfer and return CURL_WRITEFUNC_ERROR · Issue #13337 · curl/curl

I did this We have the scenario when we put the transfer on pause and resume it after a while and then stop transfer with CURL_WRITEFUNC_ERROR. For that we register CURLOPT_WRITEFUNCTION callback a...
GitHub
#opensource #curl

#hyper #curl

#curl

#curl

I wonder if @bagder is aware that millions of Garmin users are carrying a #curl licence credit on their wrists
A Garmin watch on a hairy wrist, the former displaying the message: "This product may contain Curl, distributed under the MIT/X License."
#curl @daniel:// stenberg://

#curl

#curl sometimes fails to access some servers. In most situations the problem is not in curl itself but on the server side. Example:

1. Fails: curl radissonhotels.com

2. Works: curl -A 'Mozilla/5.0 xx Chrome/119' radissonhotels.com

3. Fails: curl -A 'Mozilla/5.0 xx Chrome/118' radissonhotels.com

4. Fails, too: curl -A 'Mozilla/5.0 xx Chrome/1189' radissonhotels.com

Perhaps they perform #filtering to obtain improved #security? It's hard to tell, but any serious attacker surely knows how to spoof the user agent string and bypass such simple #regex

#security #RegEx #curl #filtering

I was reminded of the great #Cisco security fix of 2019

#curl

a config file showing how it returns a 403 error if the user agent contains the word "curl"
#curl #cisco

On this day twenty-six years ago, we shipped #curl 4.2

It introduced HTTPS support (powered by SSLeay) and the -T command line option.

As a bonus, a look at the original cURL logo:

the original cURL logo with the text "a client that groks the URLs"
#curl

#curl

#curl

Today I found a TUI frontend for curl! 🔥

🌀**cute**: TUI HTTP client with API/auth key management and request history/storage.

🌐 Supports importing Postman collections!

🦀 Written in Rust & built with @ratatui_rs

⭐ GitHub: github.com/PThorpe92/CuTE

#rustlang #ratatui #tui #curl #http #request #api #auth

GitHub - PThorpe92/CuTE: HTTP client/libcurl TUI front end in Rust, with request + key storage

HTTP client/libcurl TUI front end in Rust, with request + key storage - PThorpe92/CuTE
GitHub
#RustLang #http #API #curl #tui #ratatui #request #auth @Ratatui

#curl

#curl

#curl

tip for STF: the IBB bug-bounty (which #curl is part of) gives 20% of the bounty to the project and 80% to the reporter - which I think is nice because there is certainly work to be done from the project's part as well to deal with the issues ...
#curl

#curl

#OpenSSL #quic #curl

#curl

Today when #curl has just surpassed 32,000 commits it is *almost* at 34.000 stars on GitHub. github.com/curl/curl

GitHub - curl/curl: A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, T

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP...
GitHub
#curl

#curl

#opensource #curl @daniel:// stenberg://

"I was offered 2000 USD funding to the curl project, via a crypto currency and
an elaborate setup. I told them we happily accept funding but only as "real
money". They then declined to fund us." -- good riddance!

#curl @bagder

#curl @daniel:// stenberg://

#http #curl

⇧