How I Can Get P1 Nasa easily — Dorking

3 min readJul 14, 2024

Summary

Well according to the title here I will share about how I got P1 at nasa? only using the dorking technique I got P1, here’s the story, when I wanted to sleep suddenly my friend called and told me he got P1 in the nasa VDP program using only simple dorking, immediately I opened my eyes, “really bro?”, and he replied “really cuk”, I used this dorking

site:NASA.gov "https://drive.google.com/file/d/"

What is Publicly Accessible Google Drive?

A vulnerability has been identified where a Google Drive link has been publicly shared, allowing unrestricted access to anyone with the link. This issue grants all users the ability to view, edit, delete, and upload files within the Drive. Such unrestricted permissions can lead to severe security and privacy risks for the owner of the Drive and any sensitive data stored within it.

Proof of concept

Using the dorking provided by my friend Dhafy (Bug Hunter), I tried dorking to get the Publicly Accessible Google Drive vulnerability, and more or less like this, simple but dangerous

2. I try to check several web pages that display links to the internal google drive, I try to access one by one to see if there is a drive that gives high access to users who access the google drive link.

3. Here I get a pdf that displays a google drive link that gives me access to read, delete, upload files, and other access, I try to create a folder and upload a photo as a poc following the photo