Rafael Pfister

HTTP / Autodiscover

Test headers, redirects and Autodiscover.

HTTP headers

Fetches only a URL's response headers, without loading the body.

Webmail

PowerShell (Windows)

Invoke-WebRequest Built-in 

(Invoke-WebRequest -Method Head -Uri "https://webmail.example.com" -UseBasicParsing).Headers

curl Built-in 

curl.exe -sSI "https://webmail.example.com"

Unix shell (bash)

curl Built-in 

curl -sSI "https://webmail.example.com"

wget Add-on tool 

wget -S --spider "https://webmail.example.com"

Autodiscover

PowerShell (Windows)

Invoke-WebRequest Built-in 

(Invoke-WebRequest -Method Head -Uri "https://autodiscover.example.com/autodiscover/autodiscover.xml" -UseBasicParsing).Headers

curl Built-in 

curl.exe -sSI "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Unix shell (bash)

curl Built-in 

curl -sSI "https://autodiscover.example.com/autodiscover/autodiscover.xml"

wget Add-on tool 

wget -S --spider "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Follow redirects

Traces a URL's redirect chain step by step.

PowerShell (Windows)

Invoke-WebRequest Built-in 

$u = "https://mail.example.com"
do {
  $r = Invoke-WebRequest -Uri $u -Method Head -MaximumRedirection 0 -SkipHttpErrorCheck -UseBasicParsing
  "{0} -> {1}" -f [int]$r.StatusCode, $r.Headers.Location
  $u = $r.Headers.Location
} while ($u)

curl Built-in 

curl.exe -sSIL "https://mail.example.com"

Unix shell (bash)

curl Built-in 

curl -sSIL "https://mail.example.com" | grep -Ei "^(HTTP/|location:)"

wget Add-on tool 

wget --max-redirect=10 -S --spider "https://mail.example.com" 2>&1 | grep -Ei "HTTP/|Location:"

-SkipHttpErrorCheck requires PowerShell 7 or newer.

Test Autodiscover

Sends an Autodiscover request to autodiscover.<domain> (Exchange / Microsoft 365).

PowerShell (Windows)

Invoke-RestMethod Built-in 

$body = @'
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
  <Request>
    <EMailAddress>user@example.com</EMailAddress>
    <AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a</AcceptableResponseSchema>
  </Request>
</Autodiscover>
'@
Invoke-RestMethod -Method Post -ContentType "text/xml" -Credential (Get-Credential user@example.com) `
  -Uri "https://autodiscover.example.com/autodiscover/autodiscover.xml" -Body $body

curl Built-in 

curl.exe -sS -u user@example.com -H "Content-Type: text/xml" -d "@ad.xml" "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Unix shell (bash)

curl Built-in 

cat > ad.xml <<'EOF'
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
  <Request>
    <EMailAddress>user@example.com</EMailAddress>
    <AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a</AcceptableResponseSchema>
  </Request>
</Autodiscover>
EOF
curl -sS -u user@example.com -H "Content-Type: text/xml" \
  -d @ad.xml "https://autodiscover.example.com/autodiscover/autodiscover.xml"

wget Add-on tool 

wget -qO- --post-file=ad.xml --header="Content-Type: text/xml" --user=user@example.com --ask-password "https://autodiscover.example.com/autodiscover/autodiscover.xml"

Get-Credential prompts for the password securely. Basic authentication must be allowed at the target.

Other areas