nerdexam
EC-Council

312-50V10 · Question #876

You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator

The correct answer is A. filetype. The filetype: operator restricts Google search results to a specific file extension, making it the standard tool for discovering exposed files on a target site during reconnaissance.

Footprinting and Reconnaissance

Question

You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator would you use?

Options

  • Afiletype
  • Bext
  • Cinurl
  • Dsite

How the community answered

(19 responses)
  • A
    89% (17)
  • C
    5% (1)
  • D
    5% (1)

Why each option

The filetype: operator restricts Google search results to a specific file extension, making it the standard tool for discovering exposed files on a target site during reconnaissance.

AfiletypeCorrect

The filetype: operator (e.g., filetype:pdf or filetype:xls) instructs Google to return only results that are or link to files of a specified extension. This is the documented Google dork used in footprinting to surface sensitive documents, configuration files, or other exposed file types hosted on a target domain.

Bext

While ext: has historically been treated as a near-synonym in some Google behavior, filetype: is the recognized and documented primary operator for file extension filtering in security testing contexts.

Cinurl

inurl: restricts results to pages where the specified keyword appears in the URL path, not by file type or extension.

Dsite

site: limits results to a specific domain or subdomain, useful for scoping a search but incapable of filtering results by file extension.

Concept tested: Google dorking filetype operator for file enumeration

Source: https://support.google.com/websearch/answer/2466433

Topics

#Google hacking#filetype operator#Google dorks#passive reconnaissance

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice