{
  "port": 5950,
  "protocol": "tcp",
  "service": "Unassigned / VNC display :50",
  "oneLiner": "Unassigned by IANA; conventionally VNC display :50.",
  "whatItIs": "5950 is inside IANA's Unassigned 5915-5962 range. By the RFB convention it is display :50, and hosts that allocate VNC consoles per VM or per user session can reach that far. Because the number is round, it is also a common hand-picked port for a single dedicated VNC server.",
  "exposure": {
    "verdict": "never",
    "note": "Assume remote desktop until proven otherwise. RFB offers no transport encryption in its classic security types, so it belongs behind SSH or a VPN."
  },
  "checkCommand": "nmap -Pn -sV -p 5950 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 6143 — The Remote Framebuffer Protocol",
      "url": "https://datatracker.ietf.org/doc/html/rfc6143",
      "kind": "spec"
    }
  ]
}