PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cloudflare Tunnel & Ngrok Alternative: Entra Application Proxy Guide

projectblack.io | research | #vpn | #zero-trust | #ztna | #cloudflare-tunnel | #entra | #application-proxy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

As VPN appliances keep catching critical 0-days, the post weighs pre-authenticated ZTNA options and walks through publishing an internal WordPress site via Microsoft's Entra Application Proxy.
Published
Collected

Related coverage

research · projectblack.io
SSH Without Port Forwarding
SSH without exposing inbound ports using Cloudflare Tunnel and Access: install cloudflared, create the tunnel and an Access policy (email OTP or SSO pre-auth), and enable browser-based SSH rendering.
blog · hackerone.com
Introducing HackerOne Gateway Internal Network Testing: Superior Security for Internal Networks
HackerOne launched Gateway Internal Network Testing (INT), built on Cloudflare ZTNA to let researchers test internal assets through zero-trust tunnels with logging and TLS decryption.
research · lab.ctbb.show
Solving an ORB mystery
# Solving an ORB mystery ~/authors/j0r1an - profile j0r1an * * * Jorian Woltjer Aug 09, 2026 This is a mini-investigation that happened in the CTBB Discord. From asking a simple question, we go...
vulnerability · blog.quarkslab.com
Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
Local privilege escalation in the Cato VPN Client through the split-tunnel upload flow, from named pipe to SYSTEM delete and Windows Installer rollback.
High · vulnerability · bishopfox.com
strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication
Bishop Fox exploited CVE-2026-25075, an integer underflow in strongSwan's EAP-TTLS plugin (4.5.0-6.0.4): crafted messages crash the IKE daemon via two-phase heap corruption; upgrade to 6.0.5+.
vulnerability · bishopfox.com
eCatcher Desktop, Version 6.6.4 Advisory
Advisory on CVE-2021-33214 in eCatcher 6.6.4 and earlier: a world-writable service temp directory lets a local attacker swap in a rogue OpenVPN config for privilege escalation; fixed in 6.7.3.
Back