In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for vulnerabilities. Exam

Maintaining Access involves installing backdoors and persistence mechanisms after a system is already compromised, not passively searching for vulnerabilities.

Gaining Access involves actively exploiting already-discovered vulnerabilities to break into systems, not gathering information via search engine queries.

Reconnaissance is the information-gathering phase where attackers collect data about targets without directly interacting with their systems. Google hacking (also called Google dorking) uses advanced search operators such as 'allintitle:' or 'filetype:' to discover sensitive files, misconfigurations, and indexed vulnerabilities - all passive techniques that place it firmly in the reconnaissance phase of the ethical hacking lifecycle.

Scanning and Enumeration involves actively probing target systems with tools like Nmap to discover open ports and services, whereas Google hacking is entirely passive and requires no direct contact with the target.