Script http-qnap-nas-info

Script types: portrule
Categories: safe, discovery

Script Summary

Attempts to retrieve the model, firmware version, and enabled services from a QNAP Network Attached Storage (NAS) device.

Script Arguments


See the documentation for the slaxml library., http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

See the documentation for the http library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap --script http-qnap-nas-info -p <port> <host>

Script Output

443/tcp open  https   syn-ack
| http-qnap-nas-info:
|   Device Model: TS-859
|   Firmware Version: 3.2.5
|   Firmware Build: 0410T
|   Force SSL: 0
|   SSL Port: 443
|   WebFS Enabled: 1
|   Multimedia Station Enabled: 0
|   Multimedia Station V2 Supported: 1
|   Multimedia Station V2 Web Enabled: 0
|   Download Station Enabled: 0
|   Network Video Recorder Enabled: 0
|   Web File Manager Enabled: 1
|   Music Station Enabled: 0
|   Video Station Enabled: 0
|   Photo Station Enabled: 1
|   QWeb Server Enabled: 1
|   QWeb Server Port: 80
|   Qweb Server SSL Enabled: 0
|_  Qweb Server SSL Port: 8081



  • Brendan Coles

License: Same as Nmap--See