Locate (like .shtml files) that might be susceptible to Server Side Includes (SSI) injection.
Google Dorking utilizes advanced search operators to filter for specific URL patterns or file types that are not intended for public indexing. inurl view index shtml motel exclusive