NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
Findex is a product search page that echoes your query back to you. Explore how your input is reflected — and find the hidden internal keyword that makes the search return something it shouldn't.
#reflected-input#recon#view-source#web#beginner
DifficultyEasy
Live Environment
Ready
Spin up your own private, isolated instance of this challenge.
Auto shutdown after 60 minutes
Isolated sandbox
Captured flags are saved independently of the environment
One-click restart
Submit Flag
Hints
Unlocking any hint — including free ones — forfeits the +25% no-hint solve bonus.
It means a web page echoes back data you sent, such as a search term. Seeing how it appears in the HTML helps you understand context and spot unsafe handling.
Why inspect how a search term appears in the source?
The source shows exactly where your input lands, whether in text, an attribute or a comment. That context guides further testing and reveals extra clues left by developers.
Is the Search Challenge suitable for beginners?
Yes. It is rated easy and is free on Codelivly. It practises reconnaissance habits rather than advanced exploitation, making it a good early web challenge.