Logo -Internet Security Systems

finger

advICE :Exploits :Services : finger
The finger service is a dangerous, but nevertheless popular service. It has numerous exploits, but will also advertise user information that may be exploited by hackers/crackers.

Usage:

	finger @host
in order to find out who is logged on.

	finger username@host
in order to find info about a person.
  • bounce@

  • asking one server to finger another server for you in order to hide yourself
  • finger bomb (0)
    large numbers of recursive finger queries
  • multiple (0)
    getting many accounts with a singe request
  • period (0)
    list stale accounts
  • zero (0)
    list of accounts with a name or GECOS field
  • telnet (0)
    using finger directly without a finger program

  • RFC742 -The protocol specification.
  • Finger Service-Info about securing the finger service.
  • Morris Worm-A buffer overflow in finger was partially responsible for the Morris Worm of 1988.

RESOURCES
  • Books
  • FAQs
  • Intro
  • News
  • Lists
  • Notes
  • SEARCH



    Privacy Policy |  Copyright Info