# Pynt for Firefox Browser

{% hint style="success" %}
🚀 **At a Glance**: Pynt integrates directly with **Firefox**, enabling real-time API security testing as you browse. This seamless integration monitors API traffic, automatically generating context-aware security tests.
{% endhint %}

***

## Capturing traffic from Firefox Browser 

Pynt can also conduct an API security scan on traffic generated from Firefox in an interactive mode, following these steps:

* Configure Firefox to route traffic through Pynt.
* Run Pynt using the command: `pynt listen --captured-domains <domain of the APIs that need to be tested>`.
* Browse the site that will be tested by Pynt.
* Press Enter on Pynt to start the scan.

***

## Steps to Run Pynt with Firefox

Use the following steps to integrate Pynt with Firefox browser:

***

### **Configure Firefox to Record Traffic**

* Open Firefox and go to the settings to configure the proxy through which Pynt can capture the traffic.

<figure><img src="/files/FwOSfAM3sfZ0gtwXuGJj" alt=""><figcaption><p>Configure Proxy in Firefox</p></figcaption></figure>

If your target is *localhost* as in the example, go to about:config and modify the `network.proxy.allow_hijacking_localhost` parameter to **True**

<figure><img src="/files/JRyPe76yDe7Khfw5Fg98" alt=""><figcaption><p>Enable Firefox to route localhost traffic to proxy</p></figcaption></figure>

***

### **Configure Firefox to Import Pynt's proxy certificate**&#x20;

* The first time you execute `pynt listen`, Pynt stores the certificates in `~/.pynt/cert`.
* Import the `mitmproxy-ca-cert.cer` into Firefox

<figure><img src="/files/OmHFIDQeJVDMPXfKUo9Z" alt=""><figcaption><p>Import Pynt's proxy certificate</p></figcaption></figure>

<figure><img src="/files/vqHMmH9vNj0BaM5FHTq3" alt=""><figcaption><p>Download certificate</p></figcaption></figure>

***

## Example on OWASP crAPI

For this example we will use [`Pynt listen`](/documentation/api-security-testing/pynt-cli-modes/pynt-listen-cli-mode.md) and set it to capture localhost traffic:

```bash
pynt listen --captured-domains localhost
```

<figure><img src="/files/YpaL1xKhlIEcuYuczZG3" alt=""><figcaption></figcaption></figure>

For this example we will test with traffic to [OWASPs crAPI ](https://github.com/OWASP/crAPI)application running locally on localhost:8888

Now on Firefox set the url to <http://localhost:8888> and do various actions on crAPI web pages

<figure><img src="/files/6e9OPS3xINHH0b4oHsTy" alt=""><figcaption><p>Firefox examle</p></figcaption></figure>

After finishing browsing the site, return to the terminal where Pynt is running and press Enter to start the Pynt scan.

<figure><img src="/files/XyoYzQF3w1cX7H7JmQjc" alt=""><figcaption><p>Pynt for Firefox example</p></figcaption></figure>

***

{% hint style="info" %}
💡 **Need Help?** For any questions or troubleshooting, reach out to the [**Pynt Community Support**](https://www.pynt.io/community).
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-browsers/pynt-for-firefox-browser.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.