uirusu is virustotal automation and convenience tool for hash, file and URL submission.
The current version is 0.0.1
-
ruby
-
rubygems
-
json
-
rest-client
-
public api key from virustotal.com
% gem install uirusu
% uirusu [options]
% uirusu -f <file_with_hashes_one_per_line>
% uirusu -h FD287794107630FA3116800E617466A9
% uirusu -f <file_with_hashes_one_per_line> -x
% uirusu -u </path/to/file>
% uirusu -s "https://www.google.com"
% uirusu -s "https://www.google.com" --yaml-output > file.yaml
#First you need to include the correct require files
require 'rubygems'
require 'uirusu'
APT_KEY = "YOUR API KEY HERE"
hash = "FD287794107630FA3116800E617466A9" #Hash for a version of Poison Ivy
url = "https://www.google.com"
comment = "Hey this is Poison Ivy, anyone have a copy of this binary?"
#To query a hash(sha1/sha256/md5)
results = Uirusu::VTFile.query_report(APT_KEY, hash)
result = Uirusu::VTResult.new(hash, results)
print result.to_stdout if result != nil
#To scan for a url
results = Uirusu::VTUrl.query_report(APT_KEY, url)
result = Uirusu::VTResult.new(url, results)
print result.to_stdout if result != nil
#To post a comment to a resource(url/hash/scan_id)
results = Uirusu::VTComment.post_comment(APT_KEY, hash, comment)
print results if results != nil##License
Uirusu is licensed under the BSD license see the LICENSE file for the full license.
You can reach me at Jacob[dot]Hammack[at]hammackj[dot]com or https://www.hammackj.com