{
  "port": 17,
  "protocol": "both",
  "service": "QOTD (Quote of the Day)",
  "oneLiner": "QOTD — connect and get a short quotation, then the connection closes.",
  "whatItIs": "RFC 865 defines QOTD as a service that returns a short ASCII quote, capped at 512 characters, with no request syntax. It shipped as an inetd built-in and as a Windows 'Simple TCP/IP Services' component, usually sourced from a local fortune file. It has no operational use and is disabled by default everywhere. Its UDP form is one of the reflection vectors named in CISA's amplification alert, since a small spoofed datagram triggers a larger reply to the victim.",
  "exposure": {
    "verdict": "never",
    "note": "Named as a UDP amplification vector by CISA, and there is no use case that justifies leaving it reachable."
  },
  "checkCommand": "nc -v TARGET 17",
  "links": [
    {
      "title": "RFC 865 — Quote of the Day Protocol",
      "url": "https://www.rfc-editor.org/rfc/rfc865.html",
      "kind": "spec"
    },
    {
      "title": "CISA Alert — UDP-Based Amplification Attacks",
      "url": "https://www.cisa.gov/news-events/alerts/2014/01/17/udp-based-amplification-attacks",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}