Search code examples
securitytunnelingngrok

Are there any security flaws when exposing local sites via Ngrok?

I am really addicted to exposing my local sites via Ngrok for remote testing and I love it! But I might end up making my pc becoming vulnerable to internet attacks.

Although I read this NGROK – THE TOOL... and this Tunnelling... and they both state that Ngrok Supports Secure Tunnels to localhost

Are there any other things I must worry about with regards to security whilst using this tool?

Solution

  • Since ngrok only exposes 80 and 443 you're basically only as vulnerable as the underlying app server that is being exposed (modulo bugs in ngrok, but for the sake of argument assume there are none).