Class: VirusTotal::Application

Inherits:
Object
  • Object
show all
Defined in:
lib/virustotal/application.rb

Instance Method Summary collapse

Constructor Details

#initialize ⇒ Application

Creates a new instance of the [Application] class



8
9
10
11
12
13
14
15
 
# File 'lib/virustotal/application.rb', line 8

def initialize
	@options = {}
	@config = {}
	@hashes = Array.new
	@files_of_hashes = Array.new
	@sites = Array.new
	@uploads = Array.new
end

Instance Method Details

#load_config ⇒ Object

Loads the .virustotal config file for the api key



121
122
123
124
125
126
127
128
 
# File 'lib/virustotal/application.rb', line 121

def load_config
	if File.exists?(File.expand_path(CONFIG_FILE))
		@config = YAML.load_file File.expand_path(CONFIG_FILE)
	else
		puts "[!] #{CONFIG_FILE} does not exist. Please run virustotal --create-config, to create it."
		exit
	end
end

#parse_options(args) ⇒ Hash

Parses the command the line options and returns the parsed options hash

Returns:

  • (Hash) —

    of the parsed options



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
 
# File 'lib/virustotal/application.rb', line 20

def parse_options(args)
	begin
		@options['output'] = :stdout
		@options['debug'] = false
		
		opt = OptionParser.new do |opt|
			opt.banner =	"#{APP_NAME} v#{VERSION}\nJacob Hammack\nhttp://www.hammackj.com\n\n"
			opt.banner << "Usage: #{APP_NAME} <options>"
			opt.separator('')
			opt.separator("Search Options")
		
			opt.on('-h HASH', '--search-hash HASH', 'Searches a single hash on virustotal.com') { |hash| 
				@hashes.push(hash)
			}

			opt.on('-f FILE', '--search-file FILE', 'Searches a each hash in a file of hashes on virustotal.com') { |file|
				if File.exists?(file)
					puts "[+] Adding file #{file}" if @options["debug"]
					@files_of_hashes.push(file)
				else
					puts "[!] #{file} does not exist, please check your input!\n"
				end
			}
			
			opt.on('-u FILE', '--upload-file FILE', 'Uploads a file to virustotal.com for analysis') do |file|
				if File.exists?(file)
					puts "[+] Adding file #{file}" if @options["debug"]
					@uploads.push(file)
				else
					puts "[!] #{file} does not exist, please check your input!\n"
				end
			end

			opt.on('-s SITE', '--search-site SITE', 'Searches for a single url on virustotal.com') { |site| 
				@sites.push(site)
			}			
				
			opt.separator('')
			opt.separator('Output Options')

			opt.on('-x', '--xml-output', 'Print results as xml to stdout') {	
				@options["output"] = :xml
			}
	
			opt.on('-y', '--yaml-output', 'Print results as yaml to stdout') {
				@options['output'] = :yaml
			}
			
			opt.on('--stdout-output', 'Print results as normal text line to stdout, this is default') {
				@options['output'] = :stdout
			}

			opt.separator ''
			opt.separator 'Advanced Options'

			opt.on('-c', '--create-config', 'Creates a skeleton config file to use') do					
				if File.exists?(File.expand_path(CONFIG_FILE)) == false
					File.open(File.expand_path(CONFIG_FILE), 'w+') do |f| 
						f.write("virustotal: \n  api-key: \n  timeout: 10\n\n") 
					end

					puts "[*] An empty #{File.expand_path(CONFIG_FILE)} has been created. Please edit and fill in the correct values."
					exit
				else
					puts "[!]  #{File.expand_path(CONFIG_FILE)} already exists. Please delete it if you wish to re-create it."
					exit
				end
			end

			opt.on('-d', '--debug', 'Print verbose debug information') do |d|
				@options["debug"] = d
			end
		
			opt.separator ''
			opt.separator 'Other Options'
		
			opt.on('-v', '--version', "Shows application version information") do
				puts "#{APP_NAME} - #{VERSION}"
				exit
			end

			opt.on_tail("-?", "--help", "Show this message") { |help|
				puts opt.to_s + "\n"
				exit
			} 
		end
					
	  if ARGV.length != 0 
	    opt.parse!
	  else
	    puts opt.to_s + "\n"
		  exit
		end		
	rescue OptionParser::MissingArgument => m
		puts opt.to_s + "\n"
		exit
	end
end

#run(args) ⇒ Object

Processes all of the command line arguments and displays the results



132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
 
# File 'lib/virustotal/application.rb', line 132

def run(args)
	parse_options(args)		
	load_config
	
	vt = VirusTotal.new(@config["virustotal"]["api-key"], @config["virustotal"]["timeout"], @options["debug"])
	
	if @options['output'] == :stdout
		output_method = :to_stdout
	elsif @options['output'] == :yaml
		output_method = :to_yaml
	elsif @options['output'] == :xml
		output_method = :to_xml
		print "<results>\n"
	end
				
	if @files_of_hashes != nil
		@files_of_hashes.each do |file|
			f = File.open(file, 'r')

		  f.each do |hash|
		  	hash.chomp!
		    @hashes.push hash
		  end
		end
	end		
				
	if @hashes != nil
		@hashes.each do |hash|
			result = vt.query_hash hash					
			print result.send output_method
		end
	end
	
	if @sites != nil
		@sites.each do |site|
			result = vt.query_site site
			print result.send output_method
		end
	end
	
	if @uploads != nil
		@uploads.each do |upload|
			result = vt.query_upload upload
			print result.send output_method
		end
	end
	
	if @options['output'] == :xml
		print "</results>\n"
	end
end