Use sitemap.xml to find the hidden secret paths