Hacker News Reader

If an attacker is capable of installing apps on your server... than anything is possible. Don't know why mention Cloudflared other than clickbait. O Overall I'm huge fan of CF Zero Trust and tunnels. I wish documenation and examples were clear, but form a security stand point CF is one of the best security solutions we use.

View on HN

Two reasons I conducted this research. Firstly, because we saw its use in the wild after exploitation occurred. Second, because it poses a significant risk for data exfiltration.

Many tools can be used for this effect, but the fact that the configuration can be easily modified attacker-side through the cloudflare dashboard, and only the token for the tunnel is exposed "client" - side poses a serious challenge for defenders, especially IR teams conducting post-breach forensics.

Yes, their docs, everywhere, leave something to be desired. For example, don't put worker code snippets with little context. Always post an entire file that the user can expand and collapse. Snippets assume the user knows things that they might not.

Reply on news.ycombinator.com