Browser cache forensics tool for Chrome & Firefox — parse, preview, and download cached files
147
A lightweight web app for inspecting Chrome/Chromium and Firefox browser caches. It parses the on-disk cache formats, lists every cached resource with its URL, timestamps and content type, and lets you preview or download the original cached files right in your browser.
Built as a browser-forensics learning project — the same category of tooling used in digital forensics and incident response to reconstruct web activity from local artifacts.
docker run --rm -p 5000:5000 sc4v3g3r/browser-cache-viewer:latest
Then open http://127.0.0.1:5000 and drag-and-drop a .zip of a browser cache folder to analyse it.
Mount it read-only and point the app at it:
docker run --rm -p 5000:5000 \
-e CHROME_CACHE_DIR=/data/chromium/Default/Cache/Cache_Data \
-e FIREFOX_CACHE_BASE=/data/firefox \
-v "$HOME/.cache/chromium:/data/chromium:ro" \
-v "$HOME/.cache/mozilla/firefox:/data/firefox:ro" \
sc4v3g3r/browser-cache-viewer:latest
cache2) on-disk formatsgzip / brotli / deflate so previews show real content.zip of a collected cache to analyse it offlineStack: Python · Flask · Docker
| Variable | Default | Purpose |
|---|---|---|
CHROME_CACHE_DIR | ~/.cache/chromium/Default/Cache/Cache_Data | Default Chrome cache dir shown in the UI |
FIREFOX_CACHE_BASE | ~/.cache/mozilla/firefox/ | Firefox profiles dir; auto-scanned |
HOST | 127.0.0.1 (0.0.0.0 in the image) | Interface to bind |
PORT | 5000 | Port to bind |
FLASK_DEBUG | 0 | Flask debug mode (leave off outside dev) |
MAX_UPLOAD_MB | 500 | Max .zip upload size |
dir parameter can read arbitrary paths on the host.FLASK_DEBUG=0 outside development.Full source, README and issues on GitHub. Released under the MIT License. Chrome cache parsing uses the vendored ccl_chromium_reader by CCL Solutions Group (MIT).
Content type
Image
Digest
sha256:2490f5453…
Size
89 MB
Last updated
3 months ago
docker pull sc4v3g3r/browser-cache-viewer