The invention discloses a webpage evidence obtaining and
data extraction method based on a Chrome browser debugging protocol. The method comprises the following steps: S100, establishing communication with a Chrome browser by adopting a
WebSocket protocol, and monitoring the operation of a user on the Chrome browser; S200, inputting an address of a forensic webpage in an
address bar of the Chrome browser, and entering a forensic page; S300, judging whether
data needs to be extracted or not, if yes, executing the step S400, and if not, executing the step S500; S400, extracting data: judging whether an automatic identification result contains to-be-acquired data, an automatic identification result, manual configuration data and
data acquisition; S500, adopting a CDP debugging protocol of the Chrome browser, performing recording and recording operation of a user on the Chrome browser, and performing corresponding
screen capture on the
web page; S600, ending the operation recording mode, and configuring and / or editing the recorded operation
list; S700, playing back the configured and / or edited operation
list, and executing playback in sequence according to the operation
list; and S800, after playback is completed, generating an evidence obtaining result.