The art of Google hacking is an excellent demonstration of the power of Google, and the idiocy of not controlling access to sensitive directories.
I’ve done a few slighty dodgy things like this before (not that it’s particularly wrong). Hint: don’t call your password files “passwd.txt” and leave the passes unhashed.