id: synology-dsm-system-info

info:
  name: Synology DSM System Info - Detect
  author: DhiyaneshDk
  severity: info
  description: |
    Detected the disclosure of Synology DiskStation Manager (DSM) system information via the SYNO.API.Info endpoint, identifying all available APIs, versions, and installed packages returned without authentication.
  reference:
    - https://www.synology.com/en-us/dsm
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"Synology&nbsp;DiskStation"
    fofa-query: body="Synology&nbsp;DiskStation"
    product: diskstation_manager
    vendor: synology
  tags: synology,dsm,misconfig,diskstation-manager,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}/webapi/entry.cgi?api=SYNO.API.Info&version=1&method=query&query=all"

    matchers:
      - type: dsl
        dsl:
          - 'contains_any(body, "SYNO.Core.", "SYNO.FileStation.", "SYNO.DSM.")'
          - 'contains(header, "application/json")'
          - 'contains(body, "success\":true")'
          - 'status_code == 200'
        condition: and
# digest: 4a0a0047304502207d16f7378d5d3212c0133feeba248b21c771e9345c9ffeece98a2f3e80f27c93022100c51b67ec85889a8bdc82ec4c0926078821ecfdadf010dd3f1ebb5155cb719f23:922c64590222798bb761d5b6d8e72950