Enumeration

The Finger protocol was built for user lookups and has no authentication. When a Finger daemon is running, you can query it for usernames, login times, idle status, and sometimes plan files that leak additional system details.

Enumeration techniques range from listing all logged-in users to brute-forcing valid usernames against the daemon. The information disclosed feeds directly into credential attacks and social engineering.