I'm not sure this vuln is really that big anymore. But if you want to try anyway, use a Google Dork, like "inurl:_vti_pvt"