Font size
WorksheetsGoogle Dorking Quiz
Total questions: 75
Worksheet time: 40mins
What is Google dorking?
A technique using advanced search operators to find specific information
A method of hacking into secure databases
A way to create new search engines
A process of encrypting data
Is Google dorking illegal?
Yes, it is always illegal
No, it is not illegal
It depends on the country
Only if used for commercial purposes
What can result from the using the information gathered through Google dorking?
Increased search engine rankings
Jail time
Fines
Nothing, it is legal
What does the "site:" operator do in Google search?
Searches for a specific file type
Searches within a specific website or domain
Searches for a specific word in the URL
Shows the cached version of a web page
Which Google search operator would you use to find a specific file type like PDF or DOC?
intitle:
inurl:
filetype:
cache:
How can you search for an exact phrase using Google search?
Use the intitle: operator
Use quotation marks " "
Use the intext: operator
Use the cache: operator
Match the following
movie:
Finds movie related information
type:mil inurl:ftp ext:pdf | ps
Finds sensitive directories on FTP
showme:pass
not a command
"username.xlsx" ext:xlsx
Finds Excel files containing a username
inuse:findfile |notname
Not a command
What is the purpose of the "cache:" operator in Google search?
Searches for a specific word in the URL
Shows the cached version of a web page
Searches within a specific website
Searches for a specific file type
What is the primary purpose of Google dorking?
To create new web pages
To refine a search and pinpoint hidden information
To delete old web pages
To increase website traffic
Approximately how large is Google's index size?
10 terabytes
50 petabytes
Over 100 petabytes
1 petabyte
Which of the following is NOT a common Google dork operator?
Search
VoIP
Social Media
DNS
What types of files can Google dorking search through?
Only PDFs
Only Word documents
Only spreadsheets
All file types like PDFs, Word documents, and spreadsheets
What is a "Google dork" query used to find?
Databases, configuration files, and sensitive documents
Social media profiles, email addresses, phone numbers, and personal photos
Login pages and admin panels
Weather forecasts, news articles, sports scores, and stock prices
What is an ethical use of Google dorking?
To launch cyber attacks and steal data
To identify security weaknesses for penetration testing
To access unauthorized systems for personal gain
To spread malware and viruses
What is an unethical use of Google dorking?
Reporting security vulnerabilities to system owners
Using information for unauthorized access and malicious purposes
Conducting vulnerability assessments for clients
Fixing security issues before they are exploited
Why is it important to understand the legality of using Google dorking?
Because it can lead to improved search engine optimization
Because using it for unauthorized purposes is illegal and can have serious consequences
Because it helps in finding the best online shopping deals
Because it is a requirement for all cybersecurity certifications
What is a legitimate use of Google dorking by cybersecurity professionals?
Launching cyber attacks
Identifying security weaknesses
Accessing unauthorized systems
Stealing personal information
What can malicious hackers achieve by using Google dorking?
Fixing security vulnerabilities
Reporting security issues
Discovering unauthorized vulnerabilities
Enhancing system security
Why is it important to use Google dorking ethically?
It is always legal to use
It can lead to serious consequences if misused
It is a tool for entertainment
It guarantees system security
Which search operator would you use to find pages containing all query terms specified in the anchor text on links to the page?
allinurl:
allintitle:
allinanchor:
allintext:
What does the search operator "intitle:" do?
Restricts results to pages containing all query terms in the URL
Restricts results to documents containing the term in the title
Finds pages with specific file types
Searches for definitions from pages on the web
Which Google Dork would you use to find Cisco VPN files with group passwords for remote access?
filetype:pdf inurl:vpn
filetype:pdf "cisco" "GroupPwd"
intitle:"Index of" intext:"Config"
inurl:/remote/login?lang=en
What is the purpose of the "define:" search operator?
To find pages with specific file types
To restrict results to pages containing all query terms in the URL
To present the definition from pages on the web for the term
To find pages containing all query terms in the anchor text
Which command would you use to return SFTP/FTP server credentials on GitHub?
intitle:index.of inurl:ftp
inurl:github.com intext:.ftpconfig -issues
intitle:"Index of" / "ftp"
filetype:pdf inurl:vpn
What is the purpose of using the Google Dork "intitle:'index of' 'ftp log'"?
To find sensitive directories
To locate FTP login portals
To detect FTP sites
To find FTP passwords
Which Google Dork can be used to find FTP logins and full path disclosures pushed to GitHub?
inurl:github.com intext:ftp-config.json
intitle:"index of" "ftp log"
inurl:ftp://ftp
intitle:"index of" "ftp passwd"
What does the Google Dork "inurl:phpMyAdmin/setup/" help to find?
Sensitive page of phpmyadmin
FTP login portals
FTP sites
FTP passwords
Which Google Dork is used to find disclosed FTP for WordPress installs?
site:github.com intext:wp-config.json
intitle:"index of" "ftp log"
inurl:ftp://ftp
intitle:"index of" "ftp passwd"
What is the function of the Google Dork "intitle:'index of' 'ftp passwd'"?
Finds files containing passwords
Finds FTP login portals
Detects FTP sites
Finds sensitive directories
What is the purpose of using the Google Dork "intitle:'Authorization' 'T'"?
Finds a bunch of unprotected botnet control panels
Finds telnet servers
Finds login pages
Finds email addresses
Which Google Dork can be used to find information about the WannaCry Ransomware affected software?
intitle:index of intitle:WannaDecryptor.exe
inurl:admin.php
intitle:"Web Data Administrator - Login"
inurl:/cgi-bin/cobalt/
What does the Google Dork "filetype:php intext:Your Email: intext:Your Name:" result in?
PHP mailers
Web shells
Login pages
Botnet control panels
Which Google Dork is used to find uploaded shells named "c99"?
inurl:1c3b1t/c99/
inurl:admin.php
intitle:"Authorization" "T"
inurl:/cgi-bin/cobalt/
What is the description for the Google Dork "inurl:/layouts/mobile/view.aspx"?
Access Microsoft SharePoint CMS based domains
Finds login pages
Finds email addresses
Finds telnet servers
What is the purpose of using the Google Dork "intitle:index of" / "Cloudflare-CPanel-7.0.1"?
To expose Cloudflare-CPanel sensitive files
To find Android files
To download SQL files
To list sensitive directories
Which Google Dork can be used to find SMS logs?
intitle:"index of" / "ftp-log"
intitle:"index of" / "sms-log"
intitle:"index of" / "database.db"
intitle:"index of" / "uploads"
What does the Google Dork "intitle:index of" / "chroot.conf" reveal?
Sensitive directories
SMS logs
Sensitive information
Backup files
Which Google Dork is used to find domains' private keys?
intitle:"index of" / "api_key"
intitle:"index of" / "domain.key"
intitle:"index of" / "wp-config"
intitle:"index of" / "uploads"
What is the function of the Google Dork "inurl:/cgi-bin/"?
To find sensitive directories
To publicly access directories on Apache servers
To download backup files
To list WordPress sensitive files
What is the purpose of using the Google Dork "intitle:'index of' '/cpanel/caches/config/'"?
To find a list of passports
To access Cpanel Caches Config Directory Listing
To discover servers exposing MySQL configuration files
To find SVN directory source code
Another name for Google dorking is Google (a) .
Which Google Dork can be used to find sensitive directories using the Dockerignore file?
intitle:"index of" ".dockerignore"
intitle:"index of" "db"
intitle:"index of" "pem"
intitle:"index of" "bin"
What information can be obtained using the Google Dork "intitle:'index of' 'user' | 'users'"?
List of passports
Existing users in the system
Sensitive directories using bitcoin
Windows trash with juicy info
Which Google Dork is used to discover servers exposing sensitive SQL log data?
intitle:"index of" "database_log"
intitle:"index of" "pem"
intitle:"index of" "error_log"
intitle:"index of" "access_log"
What is the function of the Google Dork "intitle:'index of' 'backup | db | access'"?
To find SVN directory source code
To obtain sensitive directories
To find juicy information regarding PayPal backups and more
To access Cpanel Caches Config Directory Listing
What is the purpose of using the Google Dork "intitle:'Index Of' intext:'Trash'"?
To find CVs from web directories
To access personal pictures
To locate trash folders on Linux/Unix machines
To retrieve SSH keys
Which Google Dork can be used to find sensitive directories and files containing juicy information?
intitle:"Index of" "DCIM"
inurl:/wp-content/uploads/priv
inurl:admin intitle:index.of
intitle:"Index of" "wwwroot"
What does the Google Dork "intitle:'Index of' 'DCIM'" help you access?
Directory of VPN servers
Camera photos dump
Jenkins Dashboard
Trash folders on Unix systems
Which Google Dork would you use to find open FTP servers?
intitle:"Index of" "ftp"
intitle:"Index of" "git"
intitle:"Index of" "DCIM"
intitle:"Index of" "dropbox"
What is the function of the Google Dork "inurl:/wp-admin/ intext:cms/"?
To find Jenkins Dashboard
To locate misconfigured WordPress sites
To access private files
To find SSH keys
What is the purpose of the Google Dork "allintext:'FirstClass Login'"?
To find web servers with open ports
To locate login pages for FirstClass
To search for Cisco IOS images
To reveal configuration files
Which Google Dork can be used to find directory listings for Xerver web server?
intitle:index.of cgi-bin
intitle:"Directory Listing For" "Hosted By Xerver"
inurl:explorer.cfm
intitle:index.of personal
What does the Google Dork "intitle:index.of cgi-bin" help to find?
Personal documents
CGI directories containing scripts
FTP servers
Web server logs
Which Google Dork is used to find Sun-ONE web servers?
intitle:index.of personal
intitle:index.of "Served by Sun-ONE"
intitle:index.of cgi-bin
intitle:index.of private
What is the function of the Google Dork "intitle:index.of /maildir/new"?
To find newsgroups
To locate mail directories with new emails
To search for FTP servers
To find web server configuration files
What is the purpose of using the Google Dork "intitle:'Welcome To Your WebSTAR Home Page'"?
To find websites powered by BOINC
To detect Apache server status
To identify the default page for WebSTAR servers
To locate LiveZilla consoles
Which Google Dork can be used to find websites using the OpenX webserver software?
inurl:/readme.md
intitle:"Welcome to Xitami"
"This server is operated by Openx."
intitle:"Apache Tomcat"
What does the Google Dork "inurl:/phpmyadmin/themes" help identify?
Websites using Wix
Websites that host phpMyAdmin by detecting exposed theme files
Websites using the OpenX webserver
Websites using the ContentBox CMS
Which Google Dork is used to find IBM HTTP Server (AS/400)?
intitle:"Welcome To Your WebSTAR Home Page"
intitle:"Document title goes here"
intitle:"Welcome to the Advanced Extranet Server"
intitle:"Axis Happiness Page"
What is the function of the Google Dork "intitle:'Index of /' 'Proudly Served by Suftown'"?
Finds sites using Sentora CMS
Finds Suftown HTTP servers
Finds sites using the OpenX webserver
Finds sites using the ContentBox CMS
What is the purpose of using the Google Dork "intitle:index.of"?
To find the version of a web server
To locate open directories
To search for login pages
To identify vulnerable databases
Which Google Dork can be used to reveal the existence of a SNAP server?
intitle:"300 multiple choices"
intitle:Snap.Server inurl:Snap
intitle:"Test Page for Apache"
allinurl:netscape fasttrack
What does the Google Dork "allinurl:netscape fasttrack" help to find?
Default web installations of Netscape Fasttrack
Apache server documentation
Open web interfaces for Cisco products
Error messages from Lotus Domino servers
Which Google Dork is used to find Red Hat UNIX Administration Pages?
"AnWeb/1.42" intitle:index.of
"Microsoft-IIS/4.0" intitle:index.of
intitle:"Test Page for Apache"
intitle:"Red Hat" inurl:"admin"
What is the function of the Google Dork "allinurl:.nsconfig"?
To find Cisco products with an open web interface
To give access to web server's content, CGI scripts, and configuration files
To obtain a set of online documentation when Apache web server is installed
To find default web page for Apache 1.3.11
What is the primary purpose of DNSRecon?
To perform reverse DNS lookups and check DNS records for zone transfer
To install security patches on a server
To create a backup of DNS records
To encrypt DNS queries
Which command is used for DNS zone transfer in DNSRecon?
dnsrecon -t axfr
dnsrecon -t brt
dnsrecon -t srv
dnsrecon -t std
What file format can DNSRecon save results in using the --xml argument?
XML file
JSON file
CSV file
TXT file
Which argument in DNSRecon is used to specify a custom name server?
-n
-d
-t
-f
What does the command 'dnsrecon -t brt' perform?
DNS Brute Force Enumeration
Reverse DNS Lookup
Zone Transfer
TLD Expansion
What is the primary function of the `usufy.py` command in the OSRFramework?
To verify a user profile against various platforms
To check for the existence of a given email
To perform a query on platforms
To extract data from social media
Which option in `usufy.py` is used to specify the path to the list of nicks to process?
--license
-l
-n
-b
What does the `mailfy.py` command validate in the OSRFramework?
User profiles on social media
Existence of a given email address
Domain availability
Website vulnerabilities
In the OSRFramework, which command is used to perform a query on platforms?
usufy.py
mailfy.py
searchfy.py
entityfy.py
What is the primary search engine used for Google dorking?
(a)
