nerdexam
GIAC

GCIH · Question #330

A search using the term inurl: 'ViewerFrame?Mode=' is looking for what?

The correct answer is A. Web accessible devices. The query 'inurl:ViewerFrame?Mode=' is a Google dork targeting a URL parameter specific to the web viewer interface of certain network cameras, exposing publicly accessible devices on the internet.

Reconnaissance, Scanning, and Enumeration

Question

A search using the term inurl: 'ViewerFrame?Mode=' is looking for what?

Options

  • AWeb accessible devices
  • BSearchable SMB shares
  • CDefault configured HTTP servers
  • DAccessible SQL databases

How the community answered

(42 responses)
  • A
    88% (37)
  • B
    2% (1)
  • C
    2% (1)
  • D
    7% (3)

Why each option

The query 'inurl:ViewerFrame?Mode=' is a Google dork targeting a URL parameter specific to the web viewer interface of certain network cameras, exposing publicly accessible devices on the internet.

AWeb accessible devicesCorrect

The URL pattern 'ViewerFrame?Mode=' appears in the web interface of network cameras such as Panasonic IP cameras. When Google indexes these URLs, attackers can use the dork to enumerate publicly reachable camera feeds and other web-accessible network devices without any authentication bypass required.

BSearchable SMB shares

SMB shares operate over file-sharing protocols and are not exposed through HTTP URL parameters like 'ViewerFrame?Mode='.

CDefault configured HTTP servers

Default HTTP servers use generic directory paths, not the camera-specific 'ViewerFrame?Mode=' viewer parameter.

DAccessible SQL databases

SQL databases are accessed through database ports and query interfaces, not through HTTP URL patterns associated with video viewer components.

Concept tested: Google dorking to discover web-accessible network cameras

Topics

#Google dorking#OSINT#network camera discovery#passive reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice