nerdexam
EC-Council

312-50V10 · Question #730

When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system fun

The correct answer is A. site: target.com filetype:xls username password email. The correct Google dorking syntax for finding sensitive files uses the 'filetype:' operator combined with 'site:' to scope results to a specific domain.

Footprinting and Reconnaissance

Question

When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. What command will help you to search files using Google as a search engine?

Options

  • Asite: target.com filetype:xls username password email
  • Bdomain: target.com archieve:xls username password email
  • Cinurl: target.com filename:xls username password email
  • Dsite: target.com file:xls username password email

How the community answered

(37 responses)
  • A
    92% (34)
  • B
    3% (1)
  • D
    5% (2)

Why each option

The correct Google dorking syntax for finding sensitive files uses the 'filetype:' operator combined with 'site:' to scope results to a specific domain.

Asite: target.com filetype:xls username password emailCorrect

The 'site:' operator restricts results to a specific domain, and 'filetype:' is the valid Google search operator for filtering by file extension. Combining 'site:target.com filetype:xls' with keywords like 'username password email' is the correct Google dork syntax for discovering exposed sensitive spreadsheet files indexed by Google.

Bdomain: target.com archieve:xls username password email

'domain:' and 'archieve:' are not valid Google search operators, so this query would not function as intended.

Cinurl: target.com filename:xls username password email

'filename:' is not a valid Google search operator - the correct operator is 'filetype:', making this query ineffective.

Dsite: target.com file:xls username password email

'file:' is not a valid Google search operator - only 'filetype:' is recognized by Google for filtering by extension.

Concept tested: Google dorking with filetype and site operators

Source: https://support.google.com/websearch/answer/2466433

Topics

#Google dorking#filetype operator#site operator#OSINT

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice