add note about later versions of Varnish

2017-04-02 21:52:20 -05:00 · 2017-04-02 21:52:20 -05:00 · 0c3ef4bf47
parent deb7701d3e
commit 0c3ef4bf47
1 changed files with 1 additions and 1 deletions
--- a/documentation/modules/auxiliary/scanner/varnish/varnish_cli_login.md
+++ b/documentation/modules/auxiliary/scanner/varnish/varnish_cli_login.md
@ -5,7 +5,7 @@

  Varnish installed and ran the cli on localhost.  First lets kill the service: `sudo service varnish stop`.  Now, there are two configurations we want to test:

-  1. No Authentication: `varnishd -T 0.0.0.0:6082`
+  1. No Authentication: `varnishd -T 0.0.0.0:6082`. Varnish 4 and later require either passing '-S ""', or may not support unauthenticated mode at all.
  2. Authentication (based on shared secret file): `varnishd -T 0.0.0.0:6082 -S file`.
    1. I made an easy test one `echo "secret" > ~/secret`