logo

Database

Ngrok Token

Description

The source code repository contains sensitive information: ngrok Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches ngrok Token patterns in source code and configuration files

Vulnerable code example

NGROK_AUTHTOKEN=2evJBeRrdXEeSUbC9O1Tr8lC04p_5sAbK9yIxhecymbfnOiUs
NGROK_API_KEY: "2km4DBwJu9cWimb9mxsTKlGAVcA_7wkIGJL80fbbYywSBhZ2r"
ngrok config add-authtoken 1S0bHO4Z58cNXjfLLCHaPUeRk8g_1wjq3f4ueuQQtrpzs2Xj
!ngrok authtoken 2YrJq5tZZoZA0nAqxktxIwKdUNz_4P34FJFsDKUlvIX0VDypg
ngrok http 8080 --authtoken 3FxHQehsgk6fJaCOwzu3tOILUsB_8KMYasPctqZTrKsrPtalQ
version: "3"
agent:
  authtoken: 2ZLDmfXnZpMQ1sRz6zP9uaziNfR_60QYuOHYI8l1MhGBSWoO7...