From ed68d84b32310795225af9ccd191573ae9fd785c Mon Sep 17 00:00:00 2001
From: X1r0z <i@exp10it.io>
Date: Wed, 6 Sep 2023 11:40:31 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E6=97=A7=E7=89=88=E6=9C=AC=20Exchange?=
 =?UTF-8?q?=20TLS=20=E8=AF=81=E4=B9=A6=E5=85=BC=E5=AE=B9=E6=80=A7=E9=97=AE?=
 =?UTF-8?q?=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

修复旧版本 Exchange TLS 证书版本过低导致的兼容性问题
---
 lib/basicbrute.go | 1 +
 lib/check.go      | 1 +
 lib/httpbrute.go  | 1 +
 lib/ntlmbrute.go  | 1 +
 4 files changed, 4 insertions(+)

diff --git a/lib/basicbrute.go b/lib/basicbrute.go
index e5ae542..90e1411 100644
--- a/lib/basicbrute.go
+++ b/lib/basicbrute.go
@@ -21,6 +21,7 @@ func BasicBruteWorker(info *TaskInfo) {
 				TLSClientConfig: &tls.Config{
 					InsecureSkipVerify: true,
 					Renegotiation:      tls.RenegotiateOnceAsClient,
+					MinVersion:         tls.VersionTLS10,
 				},
 				Proxy: func(_ *http.Request) (*url.URL, error) {
 					if info.proxy != "" {
diff --git a/lib/check.go b/lib/check.go
index 10bff27..6cd603b 100644
--- a/lib/check.go
+++ b/lib/check.go
@@ -17,6 +17,7 @@ func Check(targetUrl string) {
 				TLSClientConfig: &tls.Config{
 					InsecureSkipVerify: true,
 					Renegotiation:      tls.RenegotiateOnceAsClient,
+					MinVersion:         tls.VersionTLS10,
 				},
 			},
 		}
diff --git a/lib/httpbrute.go b/lib/httpbrute.go
index 1c83444..21909bb 100644
--- a/lib/httpbrute.go
+++ b/lib/httpbrute.go
@@ -30,6 +30,7 @@ func HttpBruteWorker(info *TaskInfo) {
 				TLSClientConfig: &tls.Config{
 					InsecureSkipVerify: true,
 					Renegotiation:      tls.RenegotiateOnceAsClient,
+					MinVersion:         tls.VersionTLS10,
 				},
 				Proxy: func(_ *http.Request) (*url.URL, error) {
 					if info.proxy != "" {
diff --git a/lib/ntlmbrute.go b/lib/ntlmbrute.go
index 73ec4cf..64a9082 100644
--- a/lib/ntlmbrute.go
+++ b/lib/ntlmbrute.go
@@ -23,6 +23,7 @@ func NtlmBruteWorker(info *TaskInfo) {
 					TLSClientConfig: &tls.Config{
 						InsecureSkipVerify: true,
 						Renegotiation:      tls.RenegotiateOnceAsClient,
+						MinVersion:         tls.VersionTLS10,
 					},
 					Proxy: func(_ *http.Request) (*url.URL, error) {
 						if info.proxy != "" {