1
2
3
4
5
6
7
8
9
10
11
12
import re

def extract_racoon_config(data):
    pattern = rb'(http[s]?://[\w\.-]+(:\d+)?/gateway)'
    return re.findall(pattern, data)

if __name__ == "__main__":
    with open("sample.bin", "rb") as f:
        data = f.read()
    config = extract_racoon_config(data)
    for url in config:
        print(url[0].decode())