{
  "port": 6789,
  "protocol": "tcp",
  "service": "Oracle Solaris admin console (radg / smc-https)",
  "oneLiner": "The Oracle/Sun Java Web Console over HTTPS; registered at IANA today as radg.",
  "whatItIs": "IANA's current entry for 6789/tcp is radg, \"GSS-API for the Oracle Remote Administration Daemon\", registered in 2002 and updated in 2016; older service tables, including nmap's, still print the earlier names smc-https and ibm-db2-admin. In practice this is the port of the Oracle Java Web Console on Solaris, reached as https://hostname:6789, and Oracle's documentation notes the console ships configured to refuse remote connections unless the tcp_listen property is turned on. An open 6789 therefore usually means a Solaris box with its administration console deliberately opened up.",
  "exposure": {
    "verdict": "never",
    "note": "A root-capable system administration console. Oracle's default is local-only for a reason; if it must be remote, reach it over a VPN rather than from the internet."
  },
  "checkCommand": "curl -skI https://TARGET:6789/",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6789 (radg)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6789",
      "kind": "iana"
    },
    {
      "title": "Oracle Java Web Console Reference Information — Oracle Solaris Administration: Basic Administration",
      "url": "https://docs.oracle.com/cd/E26505_01/html/E29492/ewpoy.html",
      "kind": "official-docs"
    }
  ]
}