aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers
GNU General Public License v2.0
9.63k stars 2.09k forks source link

[!] Error: Virustotal probably now is blocking our requests #194

Open GDATTACKER-RESEARCHER opened 4 years ago

GDATTACKER-RESEARCHER commented 4 years ago

[!] Error: Virustotal probably now is blocking our requests

DustinTheGreat commented 4 years ago

This error isn't new, they just need to rewrite the send_req() function.

latest-release commented 4 years ago

The problem is not with send_req, it seems virus total changed there url from https://www.virustotal.com/ui/domains/{domain}/subdomains this one leads to this error

error |  
-- | --
code | "BadRequestError"
message | "Don't be evil"

https://www.virustotal.com/gui/domain/{{dommain}}/details this one works

We faced such a problem when we dealt with this tool at Nmmapper We investigate and the problem is with the url.

Though I would suggest they offer an option of providing api for virustotal

unaipuelles commented 3 years ago

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

Leoangelo-45 commented 3 years ago

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

Any solution?

crahan commented 3 years ago

I submitted a quick fix for this issue via https://github.com/aboul3la/Sublist3r/pull/285. The pull request adds a check for a VT_APIKEY environment variable to use for the VirusTotal request. If the API key is missing, it prints an error message and skips the VirusTotal engine.

Screen Shot 2020-11-22 at 00 38 26
Toriqulislamshimanto commented 3 years ago

@crahan How did you import api key inside the sublist3r

crahan commented 3 years ago

I use the below code snippet in my .zshrc (or .bashrc) configuration file, which will load the API key from a text file (if it exists) whenever I open a shell. Alternatively you can just run export VT_APIKEY=yourapikey manually before using Sublist3r.

# VirusTotal
if [[ -f "${HOME}/.api_tokens/vt_apikey" ]]; then
    export VT_APIKEY="$(cat ${HOME}/.api_tokens/vt_apikey 2> /dev/null)"
fi
Toriqulislamshimanto commented 3 years ago

@crahan sorry for my dumb request...I am new to this Linux platform... I still couldn't fix my issue...Can you give me step-by-step instructions... Once again please accept my apology !!!

crahan commented 3 years ago

You'll need to first install a copy with my fixes before you'll be able to use the API key solution. Without a patched (and working) copy of Sublist3r it might be a little tricky to set up.

Toriqulislamshimanto commented 3 years ago

@crahan I did change the code as you said...But I get "Error: VirusTotal API key environment variable not found. Skipping" !!! How do I export the API key inside the sublist3r ?? Thanks for responding by the way

crahan commented 3 years ago

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

crahan commented 3 years ago

Based on that error, I don't think it's running the patched version of the code.

Toriqulislamshimanto commented 3 years ago

@crahan Nah....My bad.........It's is working again.....Thanks for your help brother......I won't forget your kindness !!!

crahan commented 3 years ago

Awesome, happy to hear all is well. Keep in mind though that free VirusTotal accounts have a cap on the number of API requests per minute (I think it's 4, last I checked). So you still might see errors if you query too quickly with Sublist3r.

thecanadiananonymity commented 3 years ago
shabbadont commented 3 years ago

Based on that error, I don't think it's running the patched version of the code.

How do you patch?

RoninNakomoto commented 3 years ago

@crahan @Toriqulislamshimanto @Leoangelo-45 @latest-release @GDATTACKER-RESEARCHER @DustinTheGreat

check my fork. its a fixed bug-free working copy (only runs under python3 if properly installed), also has much faster bruteforcing capabilities using aiodnsbrute (instead of subbrute). @crahan i used ur PR code as a basis to fix virustotal access problem but also added ability to enter key during runtime and it now catches error codes and messages as returned by VT API.

Azadn70 commented 3 years ago

[!] Error: Virustotal probably now is blocking our requests after input av code

theteleforce commented 2 years ago

For those who still want to use this version, I have added a minimal fix in #327 that doesn't require an API key. This should restore Virustotal checks to working as normal.

martijorba commented 2 years ago

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

what is the actual VirusTotal API key?

martijorba commented 2 years ago

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

it doesn't work, some help?

firingdove commented 1 year ago

terminal window, run the Sublist3r command. That should be all that's required.

Sorry I did that but I am still getting the error. help please.

DavidFrds commented 1 year ago

Hey, worked fine for me. First of all make sure you update your sublis3r file (/usr/lib/python3/dist-packages/sublist3r.py) with the fix added by crahan > Files changed Then export your VT_APIKEY with the command export VT_APIKEY=yourAPIkey before starting sublist3r.

To have your personal Virustotal API Key, you can follow this documentation

lincasaires commented 1 year ago

NOT WORKING FOR ME TOO =´[

firingdove commented 1 year ago

NOT WORKING FOR ME TOO =´[ I hope I am not replying late. it worked for me. follow @adves34 instructions. if its not still working please send me a message. I will walk through it with you. thanks

repra22 commented 1 year ago

Exporting the API didn't worked for me as well

proverbian commented 1 year ago

For those who still want to use this version, I have added a minimal fix in #327 that doesn't require an API key. This should restore Virustotal checks to working as normal.

Saved my day! Works like a charm! Thank you!

CHARANPRAVEENKUMAR commented 1 year ago

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

how to get our api key?

DavidFrds commented 1 year ago

everything is written here : documentation

ArsalanAbbassi commented 1 year ago

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

sorry for asking dumb question i'm new to linux how can i find my API of virus total

akramknf commented 1 year ago

just create an account and they will give you an api key

Morgoth04 commented 11 months ago

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

Any solution?

Almost 4 years late, sorry: 1) The url line in the class corresponding to Virustotal (class Virustotal(enumratorBaseThreaded):) of the sublist3er.py program must be corrected (base_url = 'https://www.virustotal.com/api/v3/domains/{domain}/subdomains'). 2)2) Place the apikey that was obtained once registered as a virustotal user in the variable sel.apikey (self.apikey = os.getenv('VT_APIKEY', 'hereenterthealphanumeric code')) 3)Save the file 4) Overwrite the sublist3r.py file in the Kali Linux path where the one you have was placed 5) Try with the command sudo ./sublist3r.py -d domainchosen.com

JFOZ1010 commented 1 month ago

Your second point is not working, por si las moscas.