Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Brief
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions.
The technique assumes that an operator already has code execution on the Windows host and does not involve