Finger — ask a host who is logged in, or look up a specific user's details, in cleartext.
RFC 1288 defines Finger as a one-line query protocol: send a username and CRLF to get that user's real name, home directory, shell, login times and the contents of their .plan file, or send an empty line to list everyone currently logged in. That is user enumeration as a service, and the RFC itself devotes a long security section to the fact. It ran as an inetd built-in on nearly every classic UNIX host and was a vector in the 1988 Morris worm through a buffer overflow in fingerd. GNU Inetutils still ships a client and server, but no mainstream system enables it.
Do not expose
It hands out account names, login times and home directories to anyone who asks, unauthenticated and in cleartext — direct reconnaissance material.
$ printf '\r\n' | nc -v TARGET 79Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.