Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Researchers have found a way to use the Chrome DevTools Protocol to access sensitive browser data on Windows. This technique allows an attacker to hijack authenticated sessions and obtain cookies and saved data from a running Google Chrome or Microsoft Edge browser. The method requires the attacker to already have code execution capabilities on the Windows system. Once this condition is met, the attacker can exploit the Chrome DevTools Protocol to gain access to the browser's sensitive information. The technique is considered a post-exploitation method, meaning it is used after an initial breach has occurred. It can be used to target both Google Chrome and Microsoft Edge browsers on Windows.