He went back to the root directory: .../view/index.shtml .

Maya typed the strange string into her browser: inurl:view/index.shtml?rooms=top&lifestyle=entertainment inurl view indexshtml hotel rooms top

Many devices are deployed with "admin/admin" or "root/password" still active. Lack of HTTPS: He went back to the root directory: