Python-script/VirusTotalScanner.py at master · deeptheengineer/Python-script · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
"""
A simple script to scan a file for virus online, Using VirusTotal API.

Author: Shivam Saini (https://github.com/shivamsn97)

Usage:
python VirusTotalScanner.py /path/to/yourfile

Installation:
pip install colorama
pip install vt-py

Login to https://www.virustotal.com/gui/, create an account, get your API key, and Paste that key down, in the API_KEY variable.

For a more detailed solution, and adding this script to your context menu, check out the main repo at https://github.com/shivamsn97/ScanIt

"""

API_KEY = "PLACE_YOUR_API_KEY_HERE"


import vt
import argparse
import os
import hashlib, time
import colorama
import time

colorama.init(convert=True)

def check_file_exists(given_path):
    if not os.path.isfile(given_path):
        raise argparse.ArgumentTypeError(f"{given_path} is not a valid file. Make sure you are trying to scan only file, not directory.")
    return given_path

def print_result(stats, file_path):
    print(colorama.Fore.MAGENTA)
    print("Scan Results for file named {}".format(file_path.split(os.sep)[-1]))
    print("-------------------------------------------------------"+colorama.Fore.RESET)
    for i in stats:
        print((colorama.Fore.RED if i in ["suspicious", "malicious"] else colorama.Fore.GREEN if i in ["harmless", "undetected"] else colorama.Fore.CYAN) + i + colorama.Fore.RESET + ": {}".format(stats[i]))
    print(colorama.Fore.MAGENTA + "-------------------------------------------------------")
    print("Verdict: \n" + colorama.Fore.RESET)
    num_safe = stats["harmless"] + stats["undetected"]
    num_unsafe = stats["suspicious"] + stats["malicious"]
    if num_unsafe == 0 and num_safe >= 20:
        print(colorama.Fore.GREEN + "TOTALLY SAFE" + colorama.Fore.RESET)
    elif num_unsafe == 0 and num_safe >=5:
        print(colorama.Fore.GREEN + "SAFE" + colorama.Fore.RESET)
    elif num_unsafe == 0 and num_safe:
        print(colorama.Fore.LIGHTGREEN_EX + "UNKNOWN" + colorama.Fore.RESET)
    elif num_unsafe == 0:
        print(colorama.Fore.YELLOW + "UNKNOWN" + colorama.Fore.RESET)
    elif num_safe > num_unsafe:
        print(colorama.Fore.LIGHTGREEN_EX + "UNKNOWN" + colorama.Fore.RESET)
    elif num_safe == 0:
        print(colorama.Fore.RED + "VERY UNSAFE" + colorama.Fore.RESET)
    else:
        print(colorama.Fore.RED + "UNSAFE" + colorama.Fore.RESET)
    print(colorama.Fore.MAGENTA + "-------------------------------------------------------" + colorama.Fore.RESET)

parser = argparse.ArgumentParser()
parser.add_argument("filepath", help="Path of the file you want to scan.", type=check_file_exists)
args = parser.parse_args()
file_path = args.filepath

with open(file_path,"rb") as f:
    bytes = f.read() # read entire file as bytes
    file_hash = hashlib.sha256(bytes).hexdigest()

with vt.Client(API_KEY) as client:
    try:
        print("Checking if file already available in VirusTotal DB.", end="")
        stats = client.get_object("/files/{}".format(file_hash)).last_analysis_stats
        print("\rFile is already available in VirusTotal DB.      ")
    except vt.error.APIError as ex:
        if not ex.code == "NotFoundError":
            raise
        with open(file_path, "rb") as f:
            choice = input("\rFile not available in VirusTotal DB. Do you want to upload? (Internet charges may apply) (Y/N)\n :: ")
            if choice.lower() in ["y", "yes"]:
                print(colorama.Fore.GREEN + "Now Uploading. ")
                analysis = client.scan_file(f)
                while True:
                    analysis = client.get_object("/analyses/{}".format(analysis.id))
                    print("\r" + colorama.Fore.MAGENTA +  "Current Status: " + colorama.Fore.RESET + analysis.status, end="")
                    if analysis.status == "completed":
                        break
                    time.sleep(10)
                stats = analysis.stats
            else:
                print("Operation cancelled. ")
                time.sleep(2)
                exit()

    print_result(stats, file_path)
    input("Press enter to exit...")