"Hacking" Phoenix LiveView with F12 and Burp Suite
Channel: Peter and Code
Date: 2021-10-16

I "hack" a Phoenix LiveView app using the Burp Suite by "decoding the HTML code" and editing the Websocket messages sent to the server. Then, I show you how to mitigate such exploits by securing your Elixir code.

00:00 - Introduction
00:41 - TryHackMe.com
01:45 - Intro to Phoenix LiveView app
02:30 - Decoding the HTML code
03:21 - Analyzing the Websocket traffic
06:10 - Intro to Burp Suite
08:45 - Editing Websocket messages
11:05 - Sending custom Websocket messages
14:08 - Mitigating the exploits in Elixir
18:05 - Outro