nerdexam
EC-Council

312-50V11 · Question #730

When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system fun

The correct answer is A. site: target.com filetype:xls username password email. The question tests knowledge of Google dorking operators used in OSINT to locate sensitive files indexed by Google. The correct syntax uses the 'filetype:' operator.

Footprinting and Reconnaissance

Question

When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. What command will help you to search files using Google as a search engine?

Options

  • Asite: target.com filetype:xls username password email
  • Bdomain: target.com archieve:xls username password email
  • Cinurl: target.com filename:xls username password email
  • Dsite: target.com file:xls username password email

How the community answered

(34 responses)
  • A
    85% (29)
  • B
    3% (1)
  • C
    3% (1)
  • D
    9% (3)

Why each option

The question tests knowledge of Google dorking operators used in OSINT to locate sensitive files indexed by Google. The correct syntax uses the 'filetype:' operator.

Asite: target.com filetype:xls username password emailCorrect

The correct Google dork syntax uses 'site:' to restrict results to a specific domain and 'filetype:' to filter by file extension, making 'site: target.com filetype:xls username password email' valid. This combination instructs Google to return only XLS spreadsheet files hosted on the target domain that may contain credential-related content. These are standard, recognized Google search operators used in OSINT and penetration testing reconnaissance.

Bdomain: target.com archieve:xls username password email

'domain:' and 'archieve:' are not valid Google search operators and will not produce targeted results.

Cinurl: target.com filename:xls username password email

'filename:' is not a recognized Google search operator - the correct operator is 'filetype:', making this syntax invalid.

Dsite: target.com file:xls username password email

'file:' is not a valid Google search operator - the correct keyword is 'filetype:', so this query would not filter by file type.

Concept tested: Google dorking with filetype and site operators for OSINT

Source: https://developers.google.com/search/docs/monitor-debug/search-operators/all-search-site

Topics

#Google hacking#dorking#filetype operator#OSINT

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice