If you're looking for ideas, here are a few suggestions:

Part 6: Mitigation for System Administrators

inurl:"view index.shtml" "upd 24"

The page footer contained a comment hidden in the .shtml source: