An Ngrok Tutorial and Primer

Introduction
Adding Authentication
HTTPS Listeners
Tunneling SSH




Tunneling RDP
Serving Directories
Summary
TL;DR

This works because Ngrok is calling outbound, and meeting its other side on the internet.

Ngrok is an application that gives you external (internet) access to your private systems that are hidden behind NAT or a firewall. It’s basically a super slick TCP tunnel that provides an address that anyone can get to, and then links the other side to something that’s normally inaccessible.

Just because hackers use something doesn’t make it automatically malicious.

Two of the examples they give include: public URLs for sending previews to clients and demoing from your own machine are cool, but if you’re in security like I am, the main use case is granting external access to internal systems once you’ve, um, gained access.

Ngrok simplifies what used to require lots of trickery, usually involving SSH.

The other cool thing about Ngrok is that it allows you to see the HTTP traffic that’s being tunneled over it. This especially helps the normies that are using it legitimately for troubleshooting (