1## 2# This file is part of WhatWeb and may be subject to 3# redistribution and commercial restrictions. Please see the WhatWeb 4# web site for more information on licensing and terms of use. 5# http://www.morningstarsecurity.com/research/whatweb 6## 7Plugin.define "Synology-DiskStation" do 8author "Brendan Coles <bcoles@gmail.com>" # 2011-08-07 9version "0.1" 10description "Synology DiskStation provides a full-featured Network Attached Storage (NAS) solution which offers RAID storage, backup, and network surveillance (NVR)." 11website "http://www.synology.com/" 12 13# ShodanHQ results as at 2011-08-07 # 14# 2,425 for stauts 15# 545 for webman 16# 534 for webman/index.cgi 17 18# Google results as at 2011-08-07 # 19# 60 for intitle:"Synology DiskStation" inurl:"webman/index.cgi" 20 21# Dorks # 22dorks [ 23'intitle:"Synology DiskStation" inurl:"webman/index.cgi"' 24] 25 26 27 28# Matches # 29matches [ 30 31# Extract Device Name # Title 32{ :string=>/<title>Synology DiskStation - ([^\s]+)<\/title>/ }, 33 34# HTML Comment 35{ :text=>"<!-- Don't contain any text node to avoid IE insertBefore bug -->" }, 36 37# JavaScript 38{ :text=>'<script type="text/javascript">SYNO.SDS.Session = {' }, 39 40# div id="sds-login-dialog-form" 41{ :text=>'<div id="sds-login-dialog-form" style="position: absolute; top: -10000px; left: -10000px;"><form id="login-form" class="x-plain-body" method="POST" action="login.cgi" target="login_iframe"' }, 42 43# Version Detection 44{ :url=>"/webman/index.cgi", :version=>/<script type="text\/javascript" src="synodefs\.cgi\?v=([\d]+)"><\/script>/ }, 45 46# Stauts Header 47{ :certainty=>75, :search=>"headers[stauts]", :status=>302, :url=>"/", :regexp=>/^301 Moved Permanently$/ }, 48 49] 50 51end 52 53