nerdexam
GIAC

GPEN · Question #181

You want to search the Apache Web server having version 2.0 using google hacking. Which of the following search queries will you use?

The correct answer is A. intitle:Sample.page.for.Apache Apache.Hook.Function. Google hacking (dorking) uses specific search operators to identify servers running particular software versions. The correct dork targets the default test page unique to Apache 2.0.

Penetration Testing Foundations & Reconnaissance

Question

You want to search the Apache Web server having version 2.0 using google hacking. Which of the following search queries will you use?

Options

  • Aintitle:Sample.page.for.Apache Apache.Hook.Function
  • Bintitle:"Test Page for Apache Installation" "It worked!"
  • Cintitle:test.page "Hey, it worked !" "SSl/TLS aware"
  • Dintitle:"Test Page for Apache Installation" "You are free"

How the community answered

(57 responses)
  • A
    84% (48)
  • B
    9% (5)
  • C
    2% (1)
  • D
    5% (3)

Why each option

Google hacking (dorking) uses specific search operators to identify servers running particular software versions. The correct dork targets the default test page unique to Apache 2.0.

Aintitle:Sample.page.for.Apache Apache.Hook.FunctionCorrect

The query 'intitle:Sample.page.for.Apache Apache.Hook.Function' is the Google dork specifically associated with the default test page generated by Apache HTTP Server version 2.0. The string 'Apache.Hook.Function' appears in the body of the Apache 2.0 default installation page, making it a version-specific fingerprint. Using intitle combined with this body text narrows results to servers exposing this exact version's default page.

Bintitle:"Test Page for Apache Installation" "It worked!"

This dork targets the generic Apache installation test page ('It worked!') without discriminating on version 2.0 specifically.

Cintitle:test.page "Hey, it worked !" "SSl/TLS aware"

This query references 'SSl/TLS aware' text found on a different Apache test page variant, not the Apache 2.0 default page.

Dintitle:"Test Page for Apache Installation" "You are free"

The phrase 'You are free' does not correspond to text found on the Apache 2.0 default test page and would not return valid results for that version.

Concept tested: Google dorking for Apache version fingerprinting

Source: https://www.exploit-db.com/google-hacking-database

Topics

#Google hacking#GHDB#Apache fingerprinting#search operators

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GPEN Practice