Rafael Pfister

HTTP / Autodiscover

Testare header, reindirizzamenti e Autodiscover.

Header HTTP

Recupera solo gli header di risposta di un URL, senza caricare il contenuto.

Webmail

PowerShell (Windows)

Invoke-WebRequest Integrato 

(Invoke-WebRequest -Method Head -Uri "https://webmail.example.com" -UseBasicParsing).Headers

curl Integrato 

curl.exe -sSI "https://webmail.example.com"

Shell Unix (bash)

curl Integrato 

curl -sSI "https://webmail.example.com"

wget Strumento aggiuntivo 

wget -S --spider "https://webmail.example.com"

Autodiscover

PowerShell (Windows)

Invoke-WebRequest Integrato 

(Invoke-WebRequest -Method Head -Uri "https://autodiscover.example.com/autodiscover/autodiscover.xml" -UseBasicParsing).Headers

curl Integrato 

curl.exe -sSI "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Shell Unix (bash)

curl Integrato 

curl -sSI "https://autodiscover.example.com/autodiscover/autodiscover.xml"

wget Strumento aggiuntivo 

wget -S --spider "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Seguire i reindirizzamenti

Segue passo per passo la catena di reindirizzamenti di un URL.

PowerShell (Windows)

Invoke-WebRequest Integrato 

$u = "https://mail.example.com"
do {
  $r = Invoke-WebRequest -Uri $u -Method Head -MaximumRedirection 0 -SkipHttpErrorCheck -UseBasicParsing
  "{0} -> {1}" -f [int]$r.StatusCode, $r.Headers.Location
  $u = $r.Headers.Location
} while ($u)

curl Integrato 

curl.exe -sSIL "https://mail.example.com"

Shell Unix (bash)

curl Integrato 

curl -sSIL "https://mail.example.com" | grep -Ei "^(HTTP/|location:)"

wget Strumento aggiuntivo 

wget --max-redirect=10 -S --spider "https://mail.example.com" 2>&1 | grep -Ei "HTTP/|Location:"

-SkipHttpErrorCheck richiede PowerShell 7 o versioni successive.

Testare Autodiscover

Invia una richiesta Autodiscover ad autodiscover.<domain> (Exchange / Microsoft 365).

PowerShell (Windows)

Invoke-RestMethod Integrato 

$body = @'
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
  <Request>
    <EMailAddress>user@example.com</EMailAddress>
    <AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a</AcceptableResponseSchema>
  </Request>
</Autodiscover>
'@
Invoke-RestMethod -Method Post -ContentType "text/xml" -Credential (Get-Credential user@example.com) `
  -Uri "https://autodiscover.example.com/autodiscover/autodiscover.xml" -Body $body

curl Integrato 

curl.exe -sS -u user@example.com -H "Content-Type: text/xml" -d "@ad.xml" "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Shell Unix (bash)

curl Integrato 

cat > ad.xml <<'EOF'
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
  <Request>
    <EMailAddress>user@example.com</EMailAddress>
    <AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a</AcceptableResponseSchema>
  </Request>
</Autodiscover>
EOF
curl -sS -u user@example.com -H "Content-Type: text/xml" \
  -d @ad.xml "https://autodiscover.example.com/autodiscover/autodiscover.xml"

wget Strumento aggiuntivo 

wget -qO- --post-file=ad.xml --header="Content-Type: text/xml" --user=user@example.com --ask-password "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Get-Credential chiede la password in modo sicuro. L'autenticazione Basic deve essere consentita sulla destinazione.

Altre aree