prahladyeri / vtscan

Command line tool to scan for malicious files using the VirusTotal API

vtscan

Command line tool to scan for malicious files using the VirusTotal API

Installation

pip install vtscan

Usage

C:\> vtscan c:\programs\FileZilla-3.44.0\filezilla.exe
calculating sha1 hash...
done. sending scan request...

Found in VT Database
permalink:  https://www.virustotal.com/gui/file/9bbf15a489e7e109f8e238013846a29448c7994a46b7507be239a2aeeccf99f7/detection/f-9bbf15a489e7e109f8e238013846a29448c7994a46b7507be239a2aeeccf99f7-1656398328
Number of positives: 0 (out of 66 scanners applied)
verbose_msg: Scan finished, information embedded
7a37556cc8d665b508dd118fb3baec27b7891fb1 is not malicious

done

C:\>

Notes

You'll need a VirusTotal API key to use this program, you can get one by registering a free account at www.virustotal.com. Once you have the API key, you can just put it in the %userprofile%\.config\vtscan-settings.json directory.

Donation

Please consider donating if this tool has helped you in any way.

• Donate through PayPal
• Donate through Patreon

You can also hire me through Upwork or Fiverr or contact me directly to get professional support and customization.

vtscan's Issues

Add support for URL scans

VirusTotal supports scanning of malicious URLs too along with files. Try and incorporate that also in the vtscan program.

Upgrade overwrites configuration

The new cfg.json file overwrites the existing one in ~/.config/vtscan/. Make sure it doesn't happen.

Add support for metascan and other APIs

Note to self

Cache scan data locally

Instead of sending new scan request to VT API each time, it's more efficient to look up local cache first.

Add terminal color to reflect scan results

Detection of malicious files should result in red color, otherwise in green. Consider using https://github.com/tartley/colorama or a similar library.

Create a configuration saving and retrieving utility instead of doing it in an ad-hoc manner

Note to self.