Finger.exe LOLBin

    Published: 2022-12-04
    Last Updated: 2022-12-04 11:15:23 UTC
    by Didier Stevens (Version: 1)
    0 comment(s)

    Guy's diary entry "Linux LOLBins Applications Available in Windows" reminded me of another Linux tool that is available on Windows: the ancient finger command.

    Here is an example with weather info for the North Pole:

    Communication takes place over TCP. Destination port is 79.

    The finger.exe command sends the string before the @ sign to the host specified after the @ sign.

    finger.exe is not proxy aware, and port 79 is hardcoded inside the finger.exe executable. Not as a number, but as a protocol name (finger) that is defined in the services list (%SystemRoot%\system32\drivers\etc\services);

     

    Didier Stevens
    Senior handler
    Microsoft MVP
    blog.DidierStevens.com

    Keywords: finger lolbin
    0 comment(s)

      Comments

      cwqwqwq
      eweew<a href="https://www.seocheckin.com/edu-sites-list/">mashood</a>
      WQwqwqwq[url=https://www.seocheckin.com/edu-sites-list/]mashood[/url]
      dwqqqwqwq mashood
      [https://isc.sans.edu/diary.html](https://isc.sans.edu/diary.html)
      [https://isc.sans.edu/diary.html | https://isc.sans.edu/diary.html]
      What's this all about ..?
      password reveal .

      Diary Archives