In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for vulnerabilities…

Maintaining access involves using backdoors or rootkits to preserve persistent entry into an already-compromised system, not gathering public information about a target.

Gaining access involves actively exploiting identified vulnerabilities to compromise a system through direct interaction with the target, unlike the passive nature of Google hacking.

Reconnaissance is the initial phase of ethical hacking focused on collecting publicly available information about a target without direct system interaction. Google hacking uses advanced search operators (e.g., allintitle:, filetype:, inurl:) to passively discover misconfigured servers, exposed credentials, and login portals indexed by search engines. This entirely passive nature makes it a classic reconnaissance technique rather than an active scanning or exploitation method.

Scanning and enumeration uses active tools like Nmap or Nessus to probe live target systems for open ports and services, which requires direct network contact unlike Google hacking.