ohio813 / malwarecookbook

Automatically exported from code.google.com/p/malwarecookbook
0 stars 0 forks source link

avsubmit.py & VT API 2.0 #40

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
VirusTotal has recently released VT API v2.0, moving v1.0 to depreciated 
status. avsubmit.py with API v1.0 still currently works, however access to v1.0 
may be removed at some point in the future.

API v2.0 uses new HTTP POST URLs for sending files and requesting reports. The 
new send file URL is "https://www.virustotal.com/vtapi/v2/file/scan" and the 
request report URL is "https://www.virustotal.com/vtapi/v2/file/report".

From reviewing the sample code on VT's website and avsubmit.py, converting the 
Virustotal.upload_file def to v2 should only require changing the HTTP POST URL.

Receiving the report and adding it to the database will require more changes 
than just updating the POST URL. Version 2 of the API now returns much more 
data and in a different format than v1. Version 2 uses a dictionary for each AV 
vendor with additional data included in the key:value pairs.

VirusTotal API v2.0 documentation and sample code available here: 
https://www.virustotal.com/documentation/public-api/

Original issue reported on code.google.com by derek.mo...@gmail.com on 7 Feb 2012 at 11:19