XML ParseError error

[xElkomy]

Anyone can fix this error ?!

Traceback (most recent call last):
  File "proxyshell_rce.py", line 369, in <module>
    main()
  File "proxyshell_rce.py", line 349, in main
    exploit(proxyshell)
  File "proxyshell_rce.py", line 179, in exploit
    proxyshell.get_legacydn()
  File "proxyshell_rce.py", line 117, in get_legacydn
    autodiscover_xml = ET.fromstring(r.content)
  File "/usr/lib/python3.8/xml/etree/ElementTree.py", line 1321, in XML
    return parser.close()
xml.etree.ElementTree.ParseError: no element found: line 1, column 0

[dmaasland]

Are you sure the server you're testing against is vulnerable?

[xElkomy]

Are you sure the server you're testing against is vulnerable?

The error on any site vulnerable or not

My python version is 3.9.5

[dmaasland]

This is a totally different error. Please add this to line 116 and share the output after running the script again:

print(r.status_code, r.headers, r.content)

[xElkomy]

Done print the response now

[dmaasland]

Your exchange version is 15.1.2308.14. Also known as Exchange 2016 CU21:

https://exchangeserverversions.blogspot.com/2016/01/exchange-server-2016.html

This version is not vulnerable: https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2016-july-13-2021-kb5004779-81e40da3-60db-4c09-bf11-b8c1e0c1b77d

[zhinianyuxin0o0]

X-OWA-Version: 15.1.225.42 I also encountered the same problem, is there vulnerability in my version?

[Sachinart]

Hi, I have the same problem tested this POC in multiple older versions but getting same error.

Traceback (most recent call last): File "C:\Users\chirag\Desktop\Hacking Learning\proxyshell-poc\proxyshell_rce.py", line 364, in main() File "C:\Users\chirag\Desktop\Hacking Learning\proxyshell-poc\proxyshell_rce.py", line 349, in main exploit(proxyshell) File "C:\Users\chirag\Desktop\Hacking Learning\proxyshell-poc\proxyshell_rce.py", line 179, in exploit proxyshell.get_legacydn() File "C:\Users\chirag\Desktop\Hacking Learning\proxyshell-poc\proxyshell_rce.py", line 117, in get_legacydn autodiscover_xml = ET.fromstring(r.content) File "C:\Users\chirag\AppData\Local\Programs\Python\Python39\lib\xml\etree\ElementTree.py", line 1347, in XML parser.feed(text) xml.etree.ElementTree.ParseError: syntax error: line 1, column 0

1st Tested in /owa/auth/15.0.1497/ 2nd Tested in /owa/14.3.513.0/

Thank You!

[Wayc0des-Land]

I got the same error (tested 15.0.1497 & 15.0.1044)

[dmaasland]

That error means that either:

1. The server isn't vulnerable
2. The email address is incorrect

Nothing I can do about it.