Exporting files from Google Chrome on Andoid's cache
There are times were you want to find a website, picture, script, etc., even though it was deleted from the internet. The first thing you should do is see if google has a cached version, or if there is a recent cache from the wayback machine. Sadly there are not always up to date, or any caches at all.
If you visited the website recently however there may still be a cached version on your computer. The only browser for me that I had visited the page was in Google Chrome. Google gave me only three interesting pages, there links are at the bottom. Senseful Solutions has a javascript port of the Frozax php script to parse the cache. Sadly the Android version of Chrome seems not to work with those parsers.
The parsers DO tell me what the structure of the files are in. The files are in two parts. One being the HTTP header. The other being the content itself. Interestingly the content is gzipped. Lets see what we can do.
Before we begin it is a good Idea to follow the Senseful Solutions guide and try to parse at least one file from cache on the PC version of Chrome. You will be given a gzip file as a result.
To copy the cache files from Google Chrome on Android the device must be rooted. Then an adb command can be used to grab the files.
sudo adb pull /data/data/[Path to Chrome] /dest
If you open up the files right now you get to see some hex values neatly arranged. I don't know about you but I can't read hex but we still need to find the relavent files.
Here is a simple python script to convert all the hex files to ascii.
import os
for dirpath, dirnames, filenames in os.walk("/home/penagwin/cached/Cache/"):
    for file in filenames:
        name = os.path.join(dirpath, file)
        bashCommand = '''hexdump -e "16 \"%_p\" \"\""''' +" " +name+''' > /home/penagwin/cached/final/''' + file
        os.system(bashCommand)
Ok so now we still have a monsterous amount of files. I had over 5000.
Copy the relevant files to its own folder.
cp grep -H -r "search for this text" final/* -l tens/
So now we know what the names most relevant files are. For me this brought the amount of files down to 10. For me that was enough to manually look at each file for the url. For example tumblr also has download servers who came up in my search that I didn't need. You may want to continue to increase your search terms.
Now we need to start looking at the content of the cache. The data is in the hex files, we just made the ascii ones to help narrow down the results. We know that somewere in the hex values is a gzip.
Look for "1f 8b" in the file, and delete everything before those numbers
Save, and rename the file extension to .gz
Open the archive for the file.
Toda! The file has ben extracted from the cache! This worked on my first time, but you may need to search through several files to find the one you need.
