WHATPORT(79) whatport.net WHATPORT(79)
79

Finger

Finger — ask a host who is logged in, or look up a specific user's details, in cleartext.

TCP IANA registry

Description

RFC 1288 defines Finger as a one-line query protocol: send a username and CRLF to get that user's real name, home directory, shell, login times and the contents of their .plan file, or send an empty line to list everyone currently logged in. That is user enumeration as a service, and the RFC itself devotes a long security section to the fact. It ran as an inetd built-in on nearly every classic UNIX host and was a vector in the 1988 Morris worm through a buffer overflow in fingerd. GNU Inetutils still ships a client and server, but no mainstream system enables it.

Exposed to the internet?

Do not expose

It hands out account names, login times and home directories to anyone who asks, unauthenticated and in cleartext — direct reconnaissance material.

Check it yourself

$ printf '\r\n' | nc -v TARGET 79

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.