Just delete suffix of the URL --> Index of /
It shows you all folders he have in there and one of them is hahacool aka his passwords.