NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
Lumen's website navigation only shows a few pages. But sitemap.xml — the list websites give to search engines — includes a page that isn't linked anywhere in the site. Find it to get the flag.
#sitemap#recon#enumeration#web#beginner
DifficultyEasy
Live Environment
Ready
Spin up your own private, isolated instance of this challenge.
Auto shutdown after 60 minutes
Isolated sandbox
Captured flags are saved independently of the environment
One-click restart
Submit Flag
Hints
Unlocking any hint — including free ones — forfeits the +25% no-hint solve bonus.
It is an XML file that lists a site's URLs so search engines can crawl them efficiently. It can accidentally expose pages the owner did not intend to promote.
How does a sitemap help with reconnaissance?
It gives a ready-made list of paths, sometimes including staging, admin or forgotten pages. Testers read it early to map an application's attack surface.
Is Hidden Sitemap free to play?
Yes. It is an easy web challenge on Codelivly with no cost, designed to teach content discovery without needing special tools.