M365 & HTTP 417 w/outlook.office.com

403 views

Skip to first unread message

Scott Link

unread,

Aug 10, 2023, 2:30:51 PM8/10/23

to ZAP User Group

Hello,

I'm on a MacOS system and I'm looked at outlook.office.com with Chrome and Firefox, but I get an HTTP 417.

I could access office.com and teams.office.com, albeit quite slowly on the latter site, without an error.

Imported the cert from ZAP and told keychain to trust TLS. Quite chrome and retried, same result--417.

Anyone have any other ideas to try?

Cheers!

psiinon

unread,

Aug 11, 2023, 3:17:04 AM8/11/23

to zaprox...@googlegroups.com

What happens if you launch Firefox or Chrome from ZAP?

Thats the recommended approach as we know ZAP should set everything up correctly.

Some firewalls do attempt to detect and block tools like ZAP.

You could try changing the User Agent string, although that shouldnt impact proxied requests.

Note that you should only attack sites that you have permission to test.

Cheers,

Simon

--
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/8825b05a-f74b-424a-ac8c-d33a81df5332n%40googlegroups.com.