Saturday, November 5, 2016

Getting Hidden App Data From Your Google Drive

Some Android applications use space on your Google Drive to store data.  You can't see this data by browsing drive the normal way.  You can get access to it if you get the access token from the app and do a few other things.

I use an app to keep some notes and other things.  They require getting the paid version of the app to backup your data.  I wanted to see if I could get it myself without paying for the app.  I found out how to do this from this Stackoverflow post  The example there uses php. Since I have been learning Python recently, I decided to see if I could do the same thing with Python.

 There is a pretty good explanation of why you need to go through all the steps you need to go through to get your data in the accepted answer for that post, so I won't go into too much detail about that here.

The first thing I did was get the apk for the app that I wanted the data from.  I tried a couple sites that let you download the apk for an app, but they didn't seem to work.  I ended up using ES File Explorer to create a backup of the app. Then I copied it over to my PC using an SD card.  Then I followed the instructions in the Stackoverflow post to get the access token.

The next thing that you need is a master token using your google username and password.

Just remember to replace YOURUSERNAME and YOURPASSWORD with your google account credentials.

Then you need to get an access token for the services you want to access.  [Edit 8/11/2017 This script was missing from the article]

Replace YOURMASTERTOKEN with the value from the first script.  Replace YOURAPPIDENTIFIER with the identifier for the app you are getting data for.  Replace YOURAPPSIGNATURE with the SHA-1 value using the instructions in the Stackoverflow post.  I removed all the colon characters and changed all the letters to lowercase to get this to work.

Before the next part you will need to install the Google python library like this.

pip install --upgrade google-api-python-client
Then you can run the following script to download files stored by the app.

This script comes mainly from this page I just modified it a bit to download the files and skip getting the credentials because I have that already from the other 2 scripts above.

This script requires creating the following json file in the same folder as the script.  It needs to be named credentials.json.

In the json file just fill in YOURACCESSTOKEN and YOURAPPSIGNATURE.  The other values can be left alone.  You might also have to update the token_expiry, depending on when you are reading this.

I'm going to try to wrap all this up into a single script, but we'll see if I end up having time for that.

No comments:

Post a Comment


  I'm not sure where I heard this, and it wasn't worded this way, but it helps to think about coding this way. Basically, any progra...