Could a website be running from a NAS, router or other small device?¶
Yes. Web services may run on NAS devices, routers, cameras, small computers, media systems and other connected equipment.
These devices may provide built-in website, file-sharing or remote-access features, or may run added software. A compromised device may also be used without the owner’s knowledge.
Investigative significance¶
The relevant device may not look like a conventional server. Potential evidence includes:
- website files;
- configuration;
- user accounts;
- access logs;
- installed packages;
- remote-access credentials; and
- network settings.
Router or DHCP records may help identify the internal address and hardware identifier.
Small devices may have limited or volatile storage. Avoid powering down, resetting or disconnecting unfamiliar systems without a plan.
Key takeaway
Identify the device’s role, preserve its configuration and logs, and establish who controlled it rather than relying on physical ownership.