search

ssl / ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
https://ezxss.com
MIT License
1.87k stars 330 forks source link

Docker image Mysql 9+ doesnt support --mysql_native_password=ON anymore #178

Closed kleozzy closed 4 days ago

kleozzy commented 1 month ago

Hey man , it seems the latest mysql docker image does not support --mysql_native_password=ON anymoe, mayb you should change the image to a good working version.

I have changed it to 8.4 but i seem to be having issues with issuing the certbot certificate after that, i am not sure if thats also related to image versions.

Thanks.

ssl commented 6 days ago

There is, indeed, a problem with Docker, since MySQL 9 doesn't support the native password no more.

I will fix this soon, I just need to look into if locking to MySQL 8 is the correct fix.

ssl commented 4 days ago

The issue has been fixed in https://github.com/ssl/ezXSS/commit/c33854483228ce3ecac21fead5623388f95f9fd5 by removing the deprecated command. MySQL 9+ by default uses the new 'caching_sha2_password' method.

To make sure your setup is correct, please fetch the latest changes from GitHub and rebuild your Docker container. If this still gives errors, you might need to delete the ezxssdb folder (be careful if you temporary bypassed this issue and already have items in your database, they will get deleted).

git pull
docker-compose down
rm -rf ./ezxssdb
docker-compose up

If any issues persist, please re-open the ticket or create a new ticket with a the new issue. Thanks for the heads up y'all!