📡

Finger (Tcp 79)

Notes from oscp.adot8.com — services.

#services#adot8

Finger <tcp 79>

User enumeration oracle. If it's open, you get valid usernames for free.

code

01nmap -sV -p79 --script finger $ip

code

01finger @$ip
02finger root@$ip
03finger admin@$ip

code

01for u in $(cat /usr/share/seclists/Usernames/top-usernames-shortlist.txt); do
02  echo "== $u =="
03  finger $u@$ip
04done

Metasploit:

code

01use auxiliary/scanner/finger/finger_users
02set RHOSTS $ip
03set USERS_FILE /usr/share/seclists/Usernames/top-usernames-shortlist.txt
04run