Giter VIP home page Giter VIP logo

virustotal's Introduction

VirusTotal

A simple Python-based command-line script to interact with blacktop's virustotal-api.

License

GPLv3

Requirements

Installation

python setup.py install

Configuration

A configuration file is used to store your VirusTotal API key. It uses the following format:

[virustotal]
apikey: <your API key here>

The configuration file can be specified using the --config command-line option. By default $HOME/.vtapi is used.

Usage

File Scan

Submit a file to be scanned.

python vt_driver.py file-scan [-h] file

Positional arguments:
 file        File path

Optional arguments:
 -h, --help  Show this help message and exit

Rescan

Rescan previously submitted file(s) without having to resubmit, thus saving bandwidth.

python vt_driver.py rescan [-h] hash [hash ...]

Positional arguments:
 hash        List of MD5/SHA1/SH256 hashes (up to 25)

Optional arguments:
 -h, --help  Show this help message and exit

File Report

Retrieve file scan results.

python vt_driver.py file-report [-h] hash [hash ...]

Positional arguments:
 hash        List of MD5/SHA1/SHA256 hashes (up to 25)

Optional arguments:
 -h, --help  Show this help message and exit

Behaviour

Get a report on the behaviour of a file in a sandbox environment.

python vt_driver.py behaviour [-h] hash

Positional arguments:
 hash        An MD5/SHA1/SHA256 hash

Optional arguments:
 -h, --help  Show this help message and exit

Pcap

Get a dump of the network traffic generated by the file.

python vt_driver.py pcap [-h] [-o OUTPUT_DIR] hash

Positional arguments:
 hash        An MD5/SHA1/SHA256 hash
 
Optional arguments:
 -h, --help  Show this help message and exit
 -o OUTPUT_DIR, --output-dir OUTPUT_DIR
             Output directory to write downloaded pcap file to
             (defaults to the current working directory)

Search

Search for files.

python vt_driver.py search [-h] [-o OFFSET] query

Positional arguments:
 query       A comma-separated search query. See
             https://www.virustotal.com/intelligence/help/file-search/#search-modifiers
             for valid search modifiers

Optional arguments:
 -h, --help  Show this help message and exit
 -o, --offset
             Offset returned by the previous search query. Allows for
             pagenation of results

Download

Download a file.

python vt_driver.py download [-h] [-o OUTPUT_DIR] hash

Positional arguments:
 hash        An MD5/SHA1/SHA256 hash
 
Optional arguments:
 -h, --help  Show this help message and exit
 -o OUTPUT_DIR, --output-dir OUTPUT_DIR
             Output directory to write downloaded file to
             (defaults to the current working directory)

URL Scan

Submit URL(s) to be scanned.

python vt_driver.py url-scan [-h] url [url ...]

Positional arguments:
 url         URL(s) (up to 25)

Optional arguments:
 -h, --help  Show this help message and exit

URL Report

Get URL scan results.

python vt_driver.py url-report [-h] url [url ...]

Positional arguments:
 url         URL(s) (up to 25)

Optional arguments:
 -h, --help  Show this help message and exit

IP Report

Get information about an IP address.

python vt_driver.py ip-report [-h] ip

Positional arguments:
 ip          An IPv4 address
 
Optional arguments:
 -h, --help  Show this help message and exit

Domain Report

Get information about a domain.

python vt_driver.py domain-report [-h] domain

Positional arguments:
 domain      A domain name
 
Optional arguments:
 -h, --help  Show this help message and exit

virustotal's People

Contributors

adrianherrera avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.