Learn
LoginRegister
← All tools

Insomnia

Tool manual · Kali & common usage

Web testing · Beginner · Web testing lane

BeginnerAPI Testing
Authorized usage only. Capture and inspect traffic only on systems and networks you own or have written permission to analyze.

What is Insomnia?

Insomnia is a lightweight REST/GraphQL client.

API exploration without Postman’s heavier UI.

Official website: Insomnia · Documentation

When do you use it?

  • You need Lightweight REST/GraphQL client for API exploration.
  • You are following a CYNARKS lab or authorized engagement that calls for Insomnia.
  • You already tried simpler checks and need this tool’s deeper capability.

Who uses it?

  • AppSec engineers
  • Bug bounty hunters (in-scope)
  • Penetration testers

How do you use it? (typical flow)

  1. Install Insomnia using the steps below (prefer Kali package or official installer).
  2. Confirm you have authorization for the target (lab VM, own system, or written scope).
  3. Run --help / man (or the Help section) to see current flags for your version.
  4. Start with a safe example from Basic commands against localhost or an authorized lab target.
  5. Record what you ran, what you observed, and any follow-up (filter, report, remediation).

Help & manual (like man / --help)

Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.

  1. 1. Docs

    https://docs.insomnia.rest/

Kali Linux

Desktop app; or use curl for pure CLI.

1. Installation

OSInstallation
Kali LinuxDesktop app; or use curl for pure CLI.
Allhttps://insomnia.rest/download

2. Basic commands

  1. 1. Verify prod hardening

    POST /graphql with introspection disabled check

    Verify prod hardening

  2. 2. Show help

    POST --help

    List flags for your installed version (same habit as man/--help).

  3. 3. Short help

    POST -h

    Alternate help flag when supported.

  4. 4. Send request

    Ctrl+Enter

    Send request

Options / flags

OptionPurpose
Ctrl+EnterSend request

5. Useful features

  • GraphQL queries
  • Environment management

6. Practical examples

  1. Example 1: Verify prod hardening

    POST /graphql with introspection disabled check

    Verify prod hardening

  2. Example 2: Show help

    POST --help

    List flags for your installed version (same habit as man/--help).

  3. Example 3: Short help

    POST -h

    Alternate help flag when supported.

  4. Example 4: Send request

    Ctrl+Enter

    Send request

7. Important notes

  • Authorized lab APIs only.
  • Authorized targets only — labs, systems you own, or written permission.
  • Prefer reading --help / man / official docs for your installed version; flags change over time.

Related course: web application security · bug bounty hunting · Commands: /commands#burp