Sign inSign up

sc4v3g3r/browser-cache-viewer

By sc4v3g3r

•Updated 3 months ago

Browser cache forensics tool for Chrome & Firefox — parse, preview, and download cached files

Image
Security
1

147

sc4v3g3r/browser-cache-viewer repository overview

⁠Browser Cache Viewer

A lightweight web app for inspecting Chrome/Chromium and Firefox browser caches. It parses the on-disk cache formats, lists every cached resource with its URL, timestamps and content type, and lets you preview or download the original cached files right in your browser.

Built as a browser-forensics learning project — the same category of tooling used in digital forensics and incident response to reconstruct web activity from local artifacts.


⁠Quick start

docker run --rm -p 5000:5000 sc4v3g3r/browser-cache-viewer:latest

Then open http://127.0.0.1:5000⁠ and drag-and-drop a .zip of a browser cache folder to analyse it.

⁠Analyse a cache already on your machine

Mount it read-only and point the app at it:

docker run --rm -p 5000:5000 \
  -e CHROME_CACHE_DIR=/data/chromium/Default/Cache/Cache_Data \
  -e FIREFOX_CACHE_BASE=/data/firefox \
  -v "$HOME/.cache/chromium:/data/chromium:ro" \
  -v "$HOME/.cache/mozilla/firefox:/data/firefox:ro" \
  sc4v3g3r/browser-cache-viewer:latest

⁠Features

  • Parses both Chrome (Simple Cache) and Firefox (cache2) on-disk formats
  • Auto-decompresses gzip / brotli / deflate so previews show real content
  • Preview or download any cached asset — images, HTML, JSON — with the correct MIME type
  • Drag-and-drop a .zip of a collected cache to analyse it offline
  • Clean single-page UI, no build step

Stack: Python · Flask · Docker


⁠Configuration

VariableDefaultPurpose
CHROME_CACHE_DIR~/.cache/chromium/Default/Cache/Cache_DataDefault Chrome cache dir shown in the UI
FIREFOX_CACHE_BASE~/.cache/mozilla/firefox/Firefox profiles dir; auto-scanned
HOST127.0.0.1 (0.0.0.0 in the image)Interface to bind
PORT5000Port to bind
FLASK_DEBUG0Flask debug mode (leave off outside dev)
MAX_UPLOAD_MB500Max .zip upload size

⁠Security notes

  • Bind to localhost and don't expose the app to untrusted users — the dir parameter can read arbitrary paths on the host.
  • Keep FLASK_DEBUG=0 outside development.
  • Uploaded archives are extracted with a path-traversal (zip-slip) guard.

⁠Source & license

Full source, README and issues on GitHub. Released under the MIT License. Chrome cache parsing uses the vendored ccl_chromium_reader by CCL Solutions Group (MIT).

Tag summary

Content type

Image

Digest

sha256:2490f5453…

Size

89 MB

Last updated

3 months ago

docker pull sc4v3g3r/browser-cache-viewer