Re:New OS fingerprint: China Unicom ONT/ONU (Realtek/Boa)

["gbfdhenr (Liang Xiangan)" <gbfdhenr () 163 com>]

Hi Nmap developers,


I'd like to submit service fingerprints for a China Unicom GPON ONT (model PT927G) that I found in my home network. 
This device runs a Linux-based firmware (kernel 3.18.24) and exposes several services.


**Device Information**:
- Model: PT927G
- Vendor: China Unicom (customized)
- Hardware hint: SMB share comment mentions "Realtek", suggesting a Realtek chipset.


**Service Fingerprints**:
1. **HTTP (port 80)**:
   - Probe: `GET /admin/index_yo_user.asp HTTP/1.0`
   - Response:
     HTTP/1.0 200 OK
     Server: Boa/0.93.15
     X-Content-Type-Options: nosniff
     X-XSS-Protection: 1;mode=block
     X-Frame-Options: SAMEORIGIN
     Content-Type: text/html
     <TITLE>Unicom</TITLE>
     <p class="model">设备型号:PT927G</p>
     - Suggested match rule:
     match http m|^HTTP/1\.0 200 OK\r\nServer: Boa/0\.93\.15.*<TITLE>Unicom</TITLE>.*设备型号:PT927G| p/Unicom PT927G GPON 
ONT HTTP admin/


2. **SMB (port 445)**:
   - Service: Samba 4.14.7
   - Share: "share" (Disk) with comment "Realtek"
   - Suggested match rule (if needed):
     ```
     match smb m|Samba 4\.14\.7| p/Samba 4.14.7 (Unicom PT927G)/
     ```


3. **UPnP (port 52881)**:
   - Service: MiniUPnP
   - Suggested match rule:
     ```
     match upnp m|MiniUPnP| p/MiniUPnP (Unicom PT927G)/
     ```


4. **Other open ports**:
   - 17998/tcp: unknown (no banner response)
   - 17999/tcp: unknown (no banner response)


**Full service detection output for reference**:
```
445/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
52881/tcp open upnp MiniUPnP
17998/tcp open unknown
17999/tcp open unknown
```


Adding these fingerprints would improve service detection for this common device in China's broadband networks.


Please let me know if you need any further details or additional probes.


Thanks,
Liang Xiangan

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/