> For the complete documentation index, see [llms.txt](https://wiki.smhuda.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.smhuda.com/pentesting/application-security/api-security/postman-and-burp.md).

# Postman and Burp

## Error in Postman Connecting/Proxying via Burp Suite:

Burp will only send HTTP/2 requests if it has been told by the server that HTTP/2 is supported. After setting the configuration in proxy options to allow only HTTP1.1, the both API requests behaved as expected.

<figure><img src="https://1450987373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MPQCk3xB4es-GyiL5_P%2Fuploads%2FP1hOJV0UOTnPKUyBtFeY%2FScreenshot%202022-11-07%20at%2012.07.32.png?alt=media&amp;token=c93f2423-5ea4-4458-ae3e-c12bd8955f93" alt=""><figcaption></figcaption></figure>

## How to Proxy via Burp Using Postman:

Ensure `SSL Verification` is toggled `Off` in Postman Settings as follows:

<figure><img src="https://1450987373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MPQCk3xB4es-GyiL5_P%2Fuploads%2FiemzeM4DGNlFetYetOiW%2FScreenshot%202022-11-07%20at%2012.10.28.png?alt=media&amp;token=9909d1cd-c97b-4160-b027-82cf5d83bd86" alt=""><figcaption></figcaption></figure>

Set the Postman proxy Settings where `System Proxy` is off and `Proxy Settings` are set to the Burp Proxy. In my case it is `127.0.0.1` and `8080` as LPORT.

<figure><img src="https://1450987373-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MPQCk3xB4es-GyiL5_P%2Fuploads%2Fmaaocbqt4n9ui0ncxeeM%2FScreenshot%202022-11-07%20at%2012.10.46.png?alt=media&amp;token=99a4e1c6-e886-4a64-b920-fa86b4fe2607" alt=""><figcaption></figcaption></figure>