Hands-On Red Team Tactics

Meterpreter over ngrok

According to its website (https://ngrok.com/), ngrok is a secure introspectable tunnel to the localhost. This exposes local servers behind NATs and firewalls to the public internet over secure tunnels. So, how do we use ngrok?

Let's start by registering to it:

Upon successful registration, you'll get the required Tunnel Authtoken. Let's copy this token:

We downloaded the ngrok package for macOS and, after uncompressing it, we got a single executable file named ngrok:

Let's first use our auth token so that whenever the ...