View files in this folder
invalidurl | http://www.microsoft.com sam | http://www.yahoo.com john | http://www.google.com
the above list is contained in the plain ascii text file called "passes.cgi"
password.cgi
try pass : sam or pass : john