adamgreenhill / virusshare-search Goto Github PK

Hi. The latest VirusShare hash repo is now 371. Thanks!

You have to set up an account ond log in to search on Virus Share.

Hi,

I dowloaded conficker worm and other files from virus share.

However no one is executing in my windows 7 VM 64 bit

Error: not a valid win 32 application
please help.

I am not sure if I can use it to search and download only ransomware malware. does it support that? I don't have the hashes so I think it will be great if it searches by family name.

Repository now has 389 MD5 hashes

All the hashes should be in a single file for simplicity. There is a project called VirusShare Hashes which does this. It provides a comprehensive and automatically updating list of hashes from VirusShare so you could just download from there.

Hi!
I saw your last code update, lets update it!
I suggest such thing (Bold text):

def main():
#Get Last VirusShare file
import urllib.request
from re import search
fp = urllib.request.urlopen("https://virusshare.com/hashes.4n6")
mybytes = fp.read()
mystr = mybytes.decode("utf8")
fp.close()
finBaseStr = mystr[mystr.rfind("hashes/VirusShare"):]
finBaseNum = str(search('>(.*)<', finBaseStr).group(1))
finBaseNumHelp = "sets latest VirusShare file released (default: " + finBaseNum + ")"
parser = argparse.ArgumentParser(description='tool to download VirusShare hash files and search them for specified hashes')
parser.add_argument('-s','--search', help='hash to search for in local repository (hint: specify any number of hashes)', nargs="+")
parser.add_argument('-u','--update', help='updates local hash containing files (--update all/missing/10,11,12/0-20)')
parser.add_argument('-l','--latest', help=finBaseNumHelp, default=finBaseNum)

What do you thing?