Exploratory Testing of an HTTP REST API with Postman for Response Validation and BurpSuite proxy

A short exploratory testing session on a REST API running locally using Postman and BurpSuite.

Using Postman to validate the messages and the syntax checking in Postman highlights a bug in the REST Service under test.

Also find some inconsistencies between proxy raw messages and the Postman display of headers sent and received.

This session was a simple exploratory testing session based around the documentation supplied by the REST API application.

- Postman runs through a proxy when: start proxy, ensure browser works through proxy, start postman to go through proxy
- Postman pretty print view shows errors - which points to a missing Content-Type header in the response - which is a bug in the REST server
- Postman show slightly different headers sent through proxy - there were differences in content-length

*************

*************

►► Contact Details:

Read my writing and blogs at:

Follow me on social media:

*************

►► Read my books

★ "Dear Evil Tester" - explore the tester's mind
★ "Java For Testers" - learn to code in Java
★ "Automating and Testing a REST API - a case study"

*************

►►Learn skills from my online training courses

★ Selenium WebDriver With Java
★ Technical Web Testing 101
★ Evil Tester Talks Technical Testing
★ Case Study: Java Desktop Application Technical Training

*************

[srinivaskadiyala]

With Postman and Burpsuite, can we get to know how the data is pulled from top level layer to middle layer?

[ofthepeaceful]

Hi, I was wondering if you can configure Newman with Burpsuite?

[ivonamicevska]

How can I set port forwarding from Postman to Burp Suite?

[RAGHAVENDRASINGH]

Can you make web application testing tutorial?