1##
2# This file is part of WhatWeb and may be subject to
3# redistribution and commercial restrictions. Please see the WhatWeb
4# web site for more information on licensing and terms of use.
5# http://www.morningstarsecurity.com/research/whatweb
6##
7Plugin.define "Synology-DiskStation" do
8author "Brendan Coles <bcoles@gmail.com>" # 2011-08-07
9version "0.1"
10description "Synology DiskStation provides a full-featured Network Attached Storage (NAS) solution which offers RAID storage, backup, and network surveillance (NVR)."
11website "http://www.synology.com/"
12
13# ShodanHQ results as at 2011-08-07 #
14# 2,425 for stauts
15#   545 for webman
16#   534 for webman/index.cgi
17
18# Google results as at 2011-08-07 #
19# 60 for intitle:"Synology DiskStation" inurl:"webman/index.cgi"
20
21# Dorks #
22dorks [
23'intitle:"Synology DiskStation" inurl:"webman/index.cgi"'
24]
25
26
27
28# Matches #
29matches [
30
31# Extract Device Name # Title
32{ :string=>/<title>Synology DiskStation - ([^\s]+)<\/title>/ },
33
34# HTML Comment
35{ :text=>"<!-- Don't contain any text node to avoid IE insertBefore bug -->" },
36
37# JavaScript
38{ :text=>'<script type="text/javascript">SYNO.SDS.Session = {' },
39
40# div id="sds-login-dialog-form"
41{ :text=>'<div id="sds-login-dialog-form" style="position: absolute; top: -10000px; left: -10000px;"><form id="login-form" class="x-plain-body" method="POST" action="login.cgi" target="login_iframe"' },
42
43# Version Detection
44{ :url=>"/webman/index.cgi", :version=>/<script type="text\/javascript" src="synodefs\.cgi\?v=([\d]+)"><\/script>/ },
45
46# Stauts Header
47{ :certainty=>75, :search=>"headers[stauts]", :status=>302, :url=>"/", :regexp=>/^301 Moved Permanently$/ },
48
49]
50
51end
52
53