🔘Pynt for Insomnia
Run Pynt API security tests from Insomnia API testing application
Insomnia
Insomnia is a powerful open-source API client that allows developers to send HTTP requests and view responses. Designed to help debug, test, and develop APIs, Insomnia offers features like request chaining, environment variables, authentication helpers, and code generation. It supports REST, GraphQL, and gRPC protocols, making it a versatile tool for API development and testing.
Pynt API Security testing with Insomnia
Download insomnia_goat.json
functional test and import into Insomnia
In this example we will use pynt listen
and set it to capture all domains (no filter)
Configuring Insomnia to Use Pynt as a Proxy
Open Insomnia.
Navigate to the settings by clicking on "Preferences" or use the shortcut
Ctrl+,
(Cmd+,
on macOS).In the Preferences window, go to the "Proxy" tab.
Check the option "Enable HTTP Proxy".
Set the "HTTP Proxy" field to
127.0.0.1
and the "Port" to6666
, which matches the Pynt listening address and port.If you're working with HTTPS requests, also check "Enable HTTPS Proxy" and use the same proxy settings.
Close the Preferences window and proceed with your API requests as usual.
We will see the following output, meaning Pynt is listening on port 6666 for incoming traffic
Run the goat tests on Insomnia, All the HTTP and HTTPS requests from Insomnia will now be routed through Pynt. When done, return to the terminal and hit Enter to start Pynt scan on the traffic generated by Insomnia
When scan is complete the Pynt report will open in the browser
Last updated