https://appsec.fyi/tools.html#postman Curated Postman resources from appsec.fyi en-us Sun, 06 Sep 2026 16:03:59 +0000 carl@chs.us (Carl Sampson) https://www.bankinfosecurity.com/how-postman-embeds-wiz-risk-data-into-dev-workflows-a-32484 https://www.bankinfosecurity.com/how-postman-embeds-wiz-risk-data-into-dev-workflows-a-32484 Library integration embeds Wiz risk data into Postman's API Catalog, surfacing known exploitable vulnerabilities, secrets, and misconfigurations within developers' existing workflows. This approach provides one-click remediation commands directly in the interface, improving security KPIs by enabling developers to address risks quickly and efficiently, representing genuine "shift-left" security. Postman beginner Wed, 12 Aug 2026 20:46:46 +0000 https://www.govinfosecurity.com/how-postman-embeds-wiz-risk-data-into-dev-workflows-a-32484 https://www.govinfosecurity.com/how-postman-embeds-wiz-risk-data-into-dev-workflows-a-32484 Library for embedding Wiz risk data into developer workflows, specifically Postman's API Catalog. This integration surfaces known exploitable vulnerabilities, secrets, and misconfigurations within developer environments, offering one-click remediation commands. The approach enhances security KPIs by allowing developers to quickly address risks directly within their existing tools, representing a genuine shift-left security practice. Postman beginner Wed, 12 Aug 2026 20:21:18 +0000 https://x.com/shawkat7h/status/2074488768443134357 https://x.com/shawkat7h/status/2074488768443134357 Shawkat Emad discovered five Server-Side Request Forgery (SSRF) vulnerabilities in Postman, each utilizing different techniques and impacting various services. While one finding was marked "Informative" as the internal team had discovered it a day prior, Emad views this as validation of their investigative approach. The researcher participated in a bug bounty program for this work. Postman intermediate Sat, 18 Jul 2026 12:48:09 +0000 https://github.com/usebruno/bruno https://github.com/usebruno/bruno Library for API exploration and testing, Bruno offers a privacy-focused, offline-first alternative to Postman and Insomnia. It stores API collections in local filesystem folders using the Bru markup language, facilitating collaboration via Git or other version control systems. Bruno is available for Mac, Windows, and Linux, with installation options including binary downloads and package managers like Homebrew, Chocolatey, Scoop, Snap, Flatpak, and Apt. Postman intermediate Mon, 10 Feb 2025 02:27:55 +0000 https://httpie.io/docs/cli/server-ssl-certificate-verification https://httpie.io/docs/cli/server-ssl-certificate-verification Library for interacting with HTTP services from the command line, designed for human-friendly testing and debugging. It supports intuitive syntax, formatted output, JSON, forms, uploads, HTTPS, proxies, authentication, custom headers, persistent sessions, downloads, and a plugin system. Installation instructions are provided for various package managers and operating systems, including standalone executables. The documentation details usage for custom methods, headers, JSON data, form submissions, offline requests, authentication, file uploads/downloads, sessions, and URL parameters. Postman beginner Fri, 13 Dec 2024 03:50:14 +0000 https://twitter.com/fardeenahmed411/status/1534391460262465538 https://twitter.com/fardeenahmed411/status/1534391460262465538 Favorite tweet: API Bug-Bounty Tools Check list (Part - 1) - Postman (It is like Burpsuite for API) - APISec - AppKnox - Synopsis API Scanner - Data Theorem API Secure #cybersecuritytips #bugbountyti... Postman beginner Thu, 09 Jun 2022 00:32:35 +0000 https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Flevelup.gitconnected.com%2Fapi-testing-with-httpie-2d2d0dbe71ab https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Flevelup.gitconnected.com%2Fapi-testing-with-httpie-2d2d0dbe71ab API Testing with HTTPie Postman beginner Wed, 25 Aug 2021 14:25:00 +0000