---
id: 403
title: "Behind enemy lines: bug hunting with Burp Infiltrator"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/behind-enemy-lines-bug-hunting-with-burp-infiltrator"
published_at: "2017-06-22T11:54:00Z"
tags: ["jetbrains", "teamcity", "collaborator", "iast", "burp-infiltrator", "0day", "bug-hunting"]
phying_url: "https://phying.com/item/403"
lang: en
---

# Behind enemy lines: bug hunting with Burp Infiltrator

## Summary

Santiago Díaz demonstrates using Burp Infiltrator to uncover a 0day in JetBrains TeamCity, with Collaborator pingbacks exposing user input reaching dangerous sinks and revealing the code path.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2017-06-22T11:54:00Z
- **Original:** https://portswigger.net/blog/behind-enemy-lines-bug-hunting-with-burp-infiltrator
- **Phying News:** https://phying.com/item/403