Finger (Solaris)

List users

finger @$TargetIP

Query for existence of specific users

finger root@$TargetIP

Brute force enumerate users

Download pentestmonkey's enumeration script:

GitHub - pentestmonkey/finger-user-enum: Username guessing tool primarily for use against the default Solaris finger service. Also supports relaying of queries through another finger server.GitHub

perl finger_user_enum.pl -U /usr/share/wordlists/Users.txt -t $TargetIP