mirror of
https://github.com/mvt-project/mvt.git
synced 2024-06-24 05:18:55 +00:00
53 lines
1.3 KiB
Python
53 lines
1.3 KiB
Python
# Mobile Verification Toolkit (MVT)
|
|
# Copyright (c) 2021-2023 The MVT Authors.
|
|
# Use of this software is governed by the MVT License 1.1 that can be found at
|
|
# https://license.mvt.re/1.1/
|
|
|
|
import logging
|
|
import os
|
|
|
|
import requests
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
MVT_VT_API_KEY = "MVT_VT_API_KEY"
|
|
|
|
|
|
class VTNoKey(Exception):
|
|
pass
|
|
|
|
|
|
class VTQuotaExceeded(Exception):
|
|
pass
|
|
|
|
|
|
def virustotal_lookup(file_hash: str):
|
|
if MVT_VT_API_KEY not in os.environ:
|
|
raise VTNoKey(
|
|
"No VirusTotal API key provided: to use VirusTotal "
|
|
"lookups please provide your API key with "
|
|
"`export MVT_VT_API_KEY=<key>`"
|
|
)
|
|
|
|
headers = {
|
|
"User-Agent": "VirusTotal",
|
|
"Content-Type": "application/json",
|
|
"x-apikey": os.environ[MVT_VT_API_KEY],
|
|
}
|
|
res = requests.get(
|
|
f"https://www.virustotal.com/api/v3/files/{file_hash}", headers=headers
|
|
)
|
|
|
|
if res.status_code == 200:
|
|
report = res.json()
|
|
return report["data"]
|
|
|
|
if res.status_code == 404:
|
|
log.info("Could not find results for file with hash %s", file_hash)
|
|
elif res.status_code == 429:
|
|
raise VTQuotaExceeded("You have exceeded the quota for your VirusTotal API key")
|
|
else:
|
|
raise Exception(f"Unexpected response from VirusTotal: {res.status_code}")
|
|
|
|
return None
|