base64 strings about iocextract HOT 2 CLOSED

import json, base64

content = \
"""
[
    {
        "data": {
            ".dockerconfigjson": "ewoJImF1dGhzIjogewoJCSJjZGUtZG9ja2VyLXJlZ2lzdHJ5LmVpYy5mdWxsc3RyZWFtLmFpIjogewoJCQkiYXV0aCI6ICJZMlJsTFhKbFoybHpkSEo1T21Oa1pTMXlaV2RwYzNSeWVRPT0iCgkJfQoJfQp9"
        }
    }
]
"""

def validate_base64(data):
    try:
        if isinstance(data, str):
            base64_bytes = bytes(data, 'ascii')
        elif isinstance(data, bytes):
            base64_bytes = data
        else:
            raise ValueError("Data type should be a string or bytes")
        
        return base64.b64encode(base64.b64decode(base64_bytes)) == base64_bytes
    except Exception:
        return False

base64_db = []

def extract_embedded_base64(data):
    for d in json.loads(data):
        for _, value in d.items():
            if validate_base64(value):
                base64_db.append(base64.b64decode(value).decode("ascii"))
            else:
                for _, value in value.items():
                    if validate_base64(value):
                        base64_db.append(base64.b64decode(value).decode("ascii"))

                    for _, value in json.loads(base64.b64decode(value).decode("ascii")).items():
                        if validate_base64(value):
                            base64_db.append(base64.b64decode(value).decode("ascii"))
                        
                        for _, value in value.items():
                            if validate_base64(value):
                                base64_db.append(base64.b64decode(value).decode("ascii"))
                            
                            for _, value in value.items():
                                if validate_base64(value):
                                    base64_db.append(base64.b64decode(value).decode("ascii"))
    
    # Final decoded value
    return base64_db[1] # Remove the "[1]" to view all values collected

print(extract_embedded_base64(content))

import iocextract

content = \
"""
[
    {
        "data": "ewoJImF1dGhzIjogewoJCSJjZGUtZG9ja2VyLXJlZ2lzdHJ5LmVpYy5mdWxsc3RyZWFtLmFpIjogewoJCQkiYXV0aCI6ICJZMlJsTFhKbFoybHpkSEo1T21Oa1pTMXlaV2RwYzNSeWVRPT0iCgkJfQoJfQp9"
    }
]
"""

print(list(iocextract.extract_encoded_urls(content, parse_json=True)))