> For the complete documentation index, see [llms.txt](https://docs.pynt.io/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-browsers/pynt-for-firefox-browser.md).

# Pynt for Firefox Browser

{% hint style="success" %}
🚀 **At a Glance**: Pynt integrates directly with **Firefox**, enabling real-time API security testing as you browse. This seamless integration monitors API traffic, automatically generating context-aware security tests.
{% endhint %}

***

## Capturing traffic from Firefox Browser&#x20;

Pynt can also conduct an API security scan on traffic generated from Firefox in an interactive mode, following these steps:

* Configure Firefox to route traffic through Pynt.
* Run Pynt using the command: `pynt listen --captured-domains <domain of the APIs that need to be tested>`.
* Browse the site that will be tested by Pynt.
* Press Enter on Pynt to start the scan.

***

## Steps to Run Pynt with Firefox

Use the following steps to integrate Pynt with Firefox browser:

***

### **Configure Firefox to Record Traffic**

* Open Firefox and go to the settings to configure the proxy through which Pynt can capture the traffic.

<figure><img src="/files/FwOSfAM3sfZ0gtwXuGJj" alt=""><figcaption><p>Configure Proxy in Firefox</p></figcaption></figure>

If your target is *localhost* as in the example, go to about:config and modify the `network.proxy.allow_hijacking_localhost` parameter to **True**

<figure><img src="/files/JRyPe76yDe7Khfw5Fg98" alt=""><figcaption><p>Enable Firefox to route localhost traffic to proxy</p></figcaption></figure>

***

### **Configure Firefox to Import Pynt's proxy certificate**&#x20;

* The first time you execute `pynt listen`, Pynt stores the certificates in `~/.pynt/cert`.
* Import the `mitmproxy-ca-cert.cer` into Firefox

<figure><img src="/files/OmHFIDQeJVDMPXfKUo9Z" alt=""><figcaption><p>Import Pynt's proxy certificate</p></figcaption></figure>

<figure><img src="/files/vqHMmH9vNj0BaM5FHTq3" alt=""><figcaption><p>Download certificate</p></figcaption></figure>

***

## Example on OWASP crAPI

For this example we will use [`Pynt listen`](/documentation/api-security-testing/pynt-cli-modes/pynt-listen-cli-mode.md) and set it to capture localhost traffic:

```bash
pynt listen --captured-domains localhost
```

<figure><img src="/files/YpaL1xKhlIEcuYuczZG3" alt=""><figcaption></figcaption></figure>

For this example we will test with traffic to [OWASPs crAPI ](https://github.com/OWASP/crAPI)application running locally on localhost:8888

Now on Firefox set the url to <http://localhost:8888> and do various actions on crAPI web pages

<figure><img src="/files/6e9OPS3xINHH0b4oHsTy" alt=""><figcaption><p>Firefox examle</p></figcaption></figure>

After finishing browsing the site, return to the terminal where Pynt is running and press Enter to start the Pynt scan.

<figure><img src="/files/XyoYzQF3w1cX7H7JmQjc" alt=""><figcaption><p>Pynt for Firefox example</p></figcaption></figure>

***

{% hint style="info" %}
💡 **Need Help?** For any questions or troubleshooting, reach out to the [**Pynt Community Support**](https://www.pynt.io/community).
{% endhint %}
