You want to retrieve password files (stored in the Web server's index directory) from various Web sites. Which of the following tools can you use to accomplish the task?

Sam Spade is a network query tool for DNS lookups, traceroutes, and WHOIS queries - it cannot search web server directory contents for specific file types.

Nmap is a network port scanner and service enumeration tool; it does not index or retrieve files stored in web server directories.

Whois is a protocol for querying domain registration information and does not provide any capability to locate or retrieve files from web servers.

Google supports advanced search operators such as 'intitle:', 'inurl:', 'filetype:', and 'site:' that can be combined to locate specific files indexed from web servers, including password files stored in publicly accessible directories. This technique, known as Google hacking or Google dorking, leverages Google's web index to find misconfigured servers exposing sensitive data without direct network scanning. It is a recognized passive reconnaissance method documented by OWASP and covered in ethical hacking curricula.