From b2405509c70c769ab3e1ff3639acaf12b73e2bb4 Mon Sep 17 00:00:00 2001
From: John <john.de.kroon@cyberant.com>
Date: Sat, 18 Oct 2025 20:40:04 +0200
Subject: [PATCH] Detection for TP-Link routers

---
 plugins/tp-link.rb | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 plugins/tp-link.rb

diff --git a/plugins/tp-link.rb b/plugins/tp-link.rb
new file mode 100644
index 00000000..2e07ad8d
--- /dev/null
+++ b/plugins/tp-link.rb
@@ -0,0 +1,24 @@
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# https://morningstarsecurity.com/research/whatweb
+#
+# This plugin is tested on a TP-Link TD-W9970 Router
+##
+Plugin.define do
+  name "TP-Link"
+  authors [
+    "John de Kroon <john.de.kroon@cyberant.com>", # 2025‑10‑18
+  ]
+  version "0.1"
+  description "Detects TP‑Link routers."
+  website "https://www.tp-link.com/"
+
+  matches [
+    {
+      :regexp => /<label id="copyright">Copyright &copy; \d{4} TP-LINK Technologies Co., Ltd\. All rights reserved\.\s*<\/label>/,
+      :model => /var\s+modelName\s*=\s*"([^"]+)";/
+    }
+  ]
+end