SYNOLOGY-NAS-CLI

Summary from the TLDR InfoSec newsletter

synology-nas-cli checks a Synology NAS for the exposures exploited in October's C3RB3R/.L0CK3D ransomware campaign: unpatched DSM builds, vulnerable SA-26:14 packages, QuickConnect and UPnP port forwarding, SMB1, ransom notes, and CVE-2024-10441 exploit traces. It shows each fix as a before-and-after dry-run plan, applies it, and reads every setting back to confirm. If encryption is already running, it can freeze the encryptor with SIGSTOP and capture its memory to recover keys. It's a zero-dependency Python CLI with an MCP server, so a Claude Code or Codex agent can run the audit end to end.