Yeah, misconfigured web servers are full of all sorts of config and temp files and other goodies that can be enumerated with the help of Google. Check out the book Google Hacking for the Penetration Tester to get a wider spectrum on it. The book is on EZ.