google dorking or using shodan can find things like this extremely easily. personally i don't do this sort of crap cause i don't need any legal problems, but it's good to know so you can do it against your own sites to see if you're exposing anything by accident like these dudes did.