logo

Quickie: Mass BASE64 Decoding, (Fri, Nov 29th)

ID: 6192e709-2f94-5364-9c53-49158a711b1b

STIX ID: report--6192e709-2f94-5364-9c53-49158a711b1b

Feed Name: SANS ISC Diary

Date Published: 2024-11-29

Date Updated: 2026-04-19

...
...

This post demonstrates a practical workflow to extract Base64-encoded email addresses from phishing SVG attachments by grepping relevant lines and decoding them with base64dump.py, using options to select all decoded items (-s a), dump to stdout (-d), and format outputs with newlines (-s A). It focuses on processing encoded IOCs for analysis; specific victim details are redacted.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.