Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

希望支持mysql8版本的caching_sha2_password弱密码检测，减少漏报 #136

Open
thleen opened this issue Sep 29, 2022 · 1 comment
Open

希望支持mysql8版本的caching_sha2_password弱密码检测，减少漏报 #136

thleen opened this issue Sep 29, 2022 · 1 comment
Assignees
@d1nfinite
Labels
enhancement New feature or request good first issue Good for newcomers

Comments

@thleen
Copy link

thleen commented Sep 29, 2022

检测mysql弱密码出现较多漏报

情况如下
查看项目代码，是在8版本的数据库文件mysql.ibd读取进行检测，并且只支持插件mysql_native_password，但是8版本默认的密码插件是caching_sha2_password，会有多个密码账号配置跳过该弱密码检测。对于8以下mysql版本，密钥文件存储于user.myd文件，默认插件是mysql_native_password。

希望支持mysql8版本的caching_sha2_password弱密码检测
@thleen thleen added the bug Something isn't working label Sep 29, 2022
@d1nfinite d1nfinite added enhancement New feature or request good first issue Good for newcomers and removed bug Something isn't working labels Sep 30, 2022
@tfxidian
Copy link

tfxidian commented Mar 9, 2023

Is there any plan to support mysql8.0 in the near future?

@asjdf asjdf mentioned this issue May 6, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@d1nfinite d1nfinite

Labels
enhancement New feature or request good first issue Good for newcomers
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@d1nfinite @tfxidian @thleen