[GH-ISSUE #1873] What's the security model of frp? #1480

New issue

Closed

opened 2026-05-05 12:56:12 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 12:56:12 -06:00

Owner

Originally created by @zzh1996 on GitHub (Jun 20, 2020).
Original GitHub issue: https://github.com/fatedier/frp/issues/1873

I run frpc on computer A and frps on computer B. If one of them is fully controlled by a hacker (so that the config file including the token is leaked), what can the hacker do to the other computer? Is it possible that the hacker can listen on any port or send arbitrary network packets on the other machine?

Originally created by @zzh1996 on GitHub (Jun 20, 2020). Original GitHub issue: https://github.com/fatedier/frp/issues/1873 I run frpc on computer A and frps on computer B. If one of them is fully controlled by a hacker (so that the config file including the token is leaked), what can the hacker do to the other computer? Is it possible that the hacker can listen on any port or send arbitrary network packets on the other machine?

gitea-mirror closed this issue

2026-05-05 12:56:13 -06:00

gitea-mirror commented

2026-05-05 12:56:14 -06:00

Author

Owner

@fatedier commented on GitHub (Jun 20, 2020):

One frpc only expose your services by your configure file, not controlled by others. So it won't be affected if frps or anothor frpc has been hacked.

@fatedier commented on GitHub (Jun 20, 2020): One frpc only expose your services by your configure file, not controlled by others. So it won't be affected if frps or anothor frpc has been hacked.

gitea-mirror commented

2026-05-05 12:56:15 -06:00

Author

Owner

@zzh1996 commented on GitHub (Jun 21, 2020):

One frpc only expose your services by your configure file, not controlled by others. So it won't be affected if frps or anothor frpc has been hacked.

What if frpc is hacked and the hacker can compose arbitrary config file?

@zzh1996 commented on GitHub (Jun 21, 2020): > One frpc only expose your services by your configure file, not controlled by others. So it won't be affected if frps or anothor frpc has been hacked. What if frpc is hacked and the hacker can compose arbitrary config file?

gitea-mirror commented

2026-05-05 12:56:15 -06:00

Author

Owner

@fatedier commented on GitHub (Jun 22, 2020):

It's just a common client. You can limit this client by yourself.

@fatedier commented on GitHub (Jun 22, 2020): It's just a common client. You can limit this client by yourself.