GPEN · Question #86
You want to search the Apache Web server having version 2.0 using google hacking. Which of the following search queries will you use?
The correct answer is D. intitle:Sample.page.for.Apache Apache.Hook.Function. Google dorking uses advanced search operators to fingerprint specific server versions; Apache 2.0's default test page contains references to 'Apache.Hook.Function', which distinguishes it from older Apache 1.3.x default pages.
Question
You want to search the Apache Web server having version 2.0 using google hacking. Which of the following search queries will you use?
Options
- Aintitle:"Test Page for Apache Installation" "You are free"
- Bintitle:"Test Page for Apache Installation" "It worked!"
- Cintitle:test.page "Hey, it worked !" "SSl/TLS aware"
- Dintitle:Sample.page.for.Apache Apache.Hook.Function
How the community answered
(29 responses)- A7% (2)
- B3% (1)
- C14% (4)
- D76% (22)
Why each option
Google dorking uses advanced search operators to fingerprint specific server versions; Apache 2.0's default test page contains references to 'Apache.Hook.Function', which distinguishes it from older Apache 1.3.x default pages.
The phrase 'You are free' does not appear on the standard Apache 2.0 default test page and is not a recognized indicator of that version.
The phrase 'It worked!' is characteristic of the Apache 1.3.x default test page, not Apache 2.0.
The phrases 'Hey, it worked !' and 'SSl/TLS aware' correspond to Apache 1.3.x SSL-enabled installations, not Apache 2.0.
The query 'intitle:Sample.page.for.Apache Apache.Hook.Function' targets the default test page unique to Apache 2.0, which references the Hook Function API that was introduced in the Apache 2.0 architecture, accurately fingerprinting that specific version.
Concept tested: Google dorking to identify specific Apache server versions
Source: https://www.exploit-db.com/google-hacking-database
Topics
Community Discussion
No community discussion yet for this question.