virustotal_api 0.5.0 → 0.5.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (38) hide show
  1. checksums.yaml +4 -4
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +20 -0
  4. data/.github/pull_request_template.md +11 -0
  5. data/.github/workflows/ruby.yml +43 -4
  6. data/CHANGELOG.md +25 -1
  7. data/README.md +53 -3
  8. data/lib/virustotal_api.rb +2 -0
  9. data/lib/virustotal_api/analysis.rb +0 -8
  10. data/lib/virustotal_api/base.rb +23 -7
  11. data/lib/virustotal_api/domain.rb +0 -6
  12. data/lib/virustotal_api/file.rb +21 -10
  13. data/lib/virustotal_api/group.rb +18 -0
  14. data/lib/virustotal_api/ip.rb +0 -6
  15. data/lib/virustotal_api/url.rb +0 -8
  16. data/lib/virustotal_api/user.rb +18 -0
  17. data/lib/virustotal_api/version.rb +1 -1
  18. data/test/analysis_test.rb +4 -1
  19. data/test/base_test.rb +15 -0
  20. data/test/domain_test.rb +3 -8
  21. data/test/exceptions_test.rb +8 -0
  22. data/test/file_test.rb +31 -26
  23. data/test/fixtures/domain_bad_request.yml +52 -0
  24. data/test/fixtures/file_find.yml +441 -824
  25. data/test/fixtures/file_not_found.yml +52 -0
  26. data/test/fixtures/file_rate_limit.yml +52 -0
  27. data/test/fixtures/file_upload.yml +1 -1
  28. data/test/fixtures/group_find.yml +216 -0
  29. data/test/fixtures/large_file_upload.yml +99 -0
  30. data/test/fixtures/user_find.yml +213 -0
  31. data/test/group_test.rb +27 -0
  32. data/test/ip_test.rb +2 -0
  33. data/test/url_test.rb +8 -26
  34. data/test/user_test.rb +26 -0
  35. data/virustotal_api.gemspec +1 -1
  36. metadata +24 -5
  37. data/.circleci/config.yml +0 -23
  38. data/.github/ISSUE_TEMPLATE.md +0 -15
data/test/fixtures/file_not_found.yml ADDED
@@ -0,0 +1,52 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://www.virustotal.com/api/v3/files/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Accept:
11
+ - "*/*"
12
+ User-Agent:
13
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
14
+ X-Apikey:
15
+ - testapikey
16
+ Content-Length:
17
+ - '0'
18
+ Content-Type:
19
+ - application/x-www-form-urlencoded
20
+ Accept-Encoding:
21
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
22
+ Host:
23
+ - www.virustotal.com
24
+ response:
25
+ status:
26
+ code: 404
27
+ message: Not Found
28
+ headers:
29
+ Cache-Control:
30
+ - no-cache
31
+ Content-Type:
32
+ - application/json; charset=utf-8
33
+ X-Cloud-Trace-Context:
34
+ - 1530c5d92ceea7ca966597807f154284
35
+ Date:
36
+ - Mon, 28 Sep 2020 16:25:32 GMT
37
+ Server:
38
+ - Google Frontend
39
+ Content-Length:
40
+ - '130'
41
+ body:
42
+ encoding: UTF-8
43
+ string: |-
44
+ {
45
+ "error": {
46
+ "code": "NotFoundError",
47
+ "message": "File \"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b\" not found"
48
+ }
49
+ }
50
+ http_version:
51
+ recorded_at: Mon, 28 Sep 2020 16:25:32 GMT
52
+ recorded_with: VCR 5.0.0
data/test/fixtures/file_rate_limit.yml ADDED
@@ -0,0 +1,52 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: post
5
+ uri: https://www.virustotal.com/api/v3/files/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b/analyse
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Accept:
11
+ - "*/*"
12
+ User-Agent:
13
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
14
+ X-Apikey:
15
+ - testapikey
16
+ Content-Length:
17
+ - '0'
18
+ Content-Type:
19
+ - application/x-www-form-urlencoded
20
+ Accept-Encoding:
21
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
22
+ Host:
23
+ - www.virustotal.com
24
+ response:
25
+ status:
26
+ code: 429
27
+ message: Too Many Requests
28
+ headers:
29
+ Cache-Control:
30
+ - no-cache
31
+ Content-Type:
32
+ - application/json; charset=utf-8
33
+ X-Cloud-Trace-Context:
34
+ - 478e4eb97aa48d5b286e7e4b3aa67ef6
35
+ Date:
36
+ - Wed, 30 Sep 2020 15:15:30 GMT
37
+ Server:
38
+ - Google Frontend
39
+ Content-Length:
40
+ - '98'
41
+ body:
42
+ encoding: UTF-8
43
+ string: |-
44
+ {
45
+ "error": {
46
+ "code": "QuotaExceededError",
47
+ "message": "Quota exceeded"
48
+ }
49
+ }
50
+ http_version:
51
+ recorded_at: Wed, 30 Sep 2020 15:15:30 GMT
52
+ recorded_with: VCR 5.0.0
data/test/fixtures/file_upload.yml CHANGED
@@ -49,6 +49,6 @@ http_interactions:
49
49
  "type": "analysis"
50
50
  }
51
51
  }
52
- http_version:
52
+ http_version:
53
53
  recorded_at: Wed, 02 Sep 2020 14:02:37 GMT
54
54
  recorded_with: VCR 5.0.0
data/test/fixtures/group_find.yml ADDED
@@ -0,0 +1,216 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://www.virustotal.com/api/v3/groups/GROUP_us
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Accept:
11
+ - "*/*"
12
+ User-Agent:
13
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
14
+ X-Apikey:
15
+ - testapikey
16
+ Content-Length:
17
+ - '0'
18
+ Content-Type:
19
+ - application/x-www-form-urlencoded
20
+ Accept-Encoding:
21
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
22
+ Host:
23
+ - www.virustotal.com
24
+ response:
25
+ status:
26
+ code: 200
27
+ message: OK
28
+ headers:
29
+ Cache-Control:
30
+ - no-cache
31
+ Content-Type:
32
+ - application/json; charset=utf-8
33
+ X-Cloud-Trace-Context:
34
+ - 424b5968185466d45e93db7cd34f7055
35
+ Date:
36
+ - Mon, 05 Oct 2020 14:16:58 GMT
37
+ Server:
38
+ - Google Frontend
39
+ Content-Length:
40
+ - '5487'
41
+ body:
42
+ encoding: UTF-8
43
+ string: |-
44
+ {
45
+ "data": {
46
+ "attributes": {
47
+ "agreement_company_address": "3582 White River Way, Farmington, UT 84025",
48
+ "agreement_company_country": "US",
49
+ "agreement_company_name": "GROUP inc",
50
+ "agreement_signatory": "Valdo Donati",
51
+ "agreement_signatory_email": "granville@okeefehomenick.co",
52
+ "agreement_signatory_title": "mr",
53
+ "agreement_signed_date": 1580891744,
54
+ "country": "USA",
55
+ "country_iso": "US",
56
+ "domain_name": "okeefehomenick.co",
57
+ "industry": "Communications",
58
+ "lock_users_api_quota_group": true,
59
+ "organization": "GROUP inc",
60
+ "organization_legal_name": "GROUP inc",
61
+ "privileges": {
62
+ "cases": {
63
+ "granted": false
64
+ },
65
+ "click_to_accept": {
66
+ "granted": true
67
+ },
68
+ "creditcards": {
69
+ "granted": false
70
+ },
71
+ "dogfooder": {
72
+ "granted": false
73
+ },
74
+ "downloads-tier-1": {
75
+ "granted": false
76
+ },
77
+ "downloads-tier-2": {
78
+ "expiration_date": 1625011200,
79
+ "granted": true
80
+ },
81
+ "file-behaviour-feed": {
82
+ "granted": false
83
+ },
84
+ "file-feed": {
85
+ "granted": false
86
+ },
87
+ "file-feed-without-av-results": {
88
+ "granted": false
89
+ },
90
+ "intelligence": {
91
+ "expiration_date": 1625011200,
92
+ "granted": true
93
+ },
94
+ "intelligence-search-tier-1": {
95
+ "granted": false
96
+ },
97
+ "intelligence-search-tier-2": {
98
+ "granted": false
99
+ },
100
+ "intelligence-search-tier-3": {
101
+ "granted": false
102
+ },
103
+ "monitor": {
104
+ "granted": false
105
+ },
106
+ "monitor-partner": {
107
+ "granted": false
108
+ },
109
+ "private": {
110
+ "expiration_date": 1625011200,
111
+ "granted": true
112
+ },
113
+ "retrohunt-tier-1": {
114
+ "granted": false
115
+ },
116
+ "retrohunt-tier-2": {
117
+ "granted": false
118
+ },
119
+ "retrohunt-tier-3": {
120
+ "granted": false
121
+ },
122
+ "sales-staff": {
123
+ "granted": false
124
+ },
125
+ "staff": {
126
+ "granted": false
127
+ },
128
+ "url-feed": {
129
+ "granted": false
130
+ },
131
+ "vtalerts": {
132
+ "granted": false
133
+ },
134
+ "vtdiff-api": {
135
+ "granted": false
136
+ },
137
+ "vtdiff-ui": {
138
+ "granted": false
139
+ },
140
+ "vtgrep": {
141
+ "granted": false
142
+ },
143
+ "widget": {
144
+ "granted": false
145
+ }
146
+ },
147
+ "quota_usage_by_user": {},
148
+ "quotas": {
149
+ "api_requests_daily": {
150
+ "allowed": 30000,
151
+ "used": 1
152
+ },
153
+ "api_requests_hourly": {
154
+ "allowed": 1800000,
155
+ "used": 0
156
+ },
157
+ "api_requests_monthly": {
158
+ "allowed": 1000000000,
159
+ "used": 15
160
+ },
161
+ "cases_creation_monthly": {
162
+ "allowed": 20,
163
+ "used": 0
164
+ },
165
+ "intelligence_downloads_monthly": {
166
+ "allowed": 15000,
167
+ "used": 0
168
+ },
169
+ "intelligence_graphs_private": {
170
+ "allowed": 0,
171
+ "used": 0
172
+ },
173
+ "intelligence_hunting_rules": {
174
+ "allowed": 25,
175
+ "used": 3
176
+ },
177
+ "intelligence_retrohunt_jobs_monthly": {
178
+ "allowed": 5,
179
+ "used": 0
180
+ },
181
+ "intelligence_searches_monthly": {
182
+ "allowed": 15000,
183
+ "used": 41
184
+ },
185
+ "intelligence_vtdiff_creation_monthly": {
186
+ "allowed": 100000000,
187
+ "used": 0
188
+ },
189
+ "monitor_storage_bytes": {
190
+ "allowed": 0,
191
+ "used": 0
192
+ },
193
+ "monitor_storage_files": {
194
+ "allowed": 0,
195
+ "used": 0
196
+ },
197
+ "monitor_uploaded_bytes": {
198
+ "allowed": 0,
199
+ "used": 0
200
+ },
201
+ "monitor_uploaded_files": {
202
+ "allowed": 0,
203
+ "used": 0
204
+ }
205
+ }
206
+ },
207
+ "id": "GROUP_us",
208
+ "links": {
209
+ "self": "https://www.virustotal.com/api/v3/groups/GROUP_us"
210
+ },
211
+ "type": "group"
212
+ }
213
+ }
214
+ http_version:
215
+ recorded_at: Mon, 05 Oct 2020 14:16:58 GMT
216
+ recorded_with: VCR 5.0.0
data/test/fixtures/large_file_upload.yml ADDED
@@ -0,0 +1,99 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://www.virustotal.com/api/v3/files/upload_url
6
+ body:
7
+ headers:
8
+ Accept:
9
+ - "*/*"
10
+ User-Agent:
11
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
12
+ X-Apikey:
13
+ - testapikey
14
+ Content-Length:
15
+ - '282'
16
+ Content-Type:
17
+ - multipart/form-data; boundary=----RubyFormBoundaryjv5FxFNLpwqDoUQA
18
+ Accept-Encoding:
19
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
20
+ Host:
21
+ - www.virustotal.com
22
+ response:
23
+ status:
24
+ code: 200
25
+ message: OK
26
+ headers:
27
+ Cache-Control:
28
+ - no-cache
29
+ Content-Type:
30
+ - application/json; charset=utf-8
31
+ X-Cloud-Trace-Context:
32
+ - 9c3d1ae8f345c5ca8060a4b793174891
33
+ Date:
34
+ - Wed, 02 Sep 2020 14:02:36 GMT
35
+ Server:
36
+ - Google Frontend
37
+ Content-Length:
38
+ - '128'
39
+ body:
40
+ encoding: UTF-8
41
+ string: |-
42
+ {
43
+ "data": "https://www.virustotal.com/_ah/upload/AMmfu6b-_DXUeFe36Sb3b0F4B8mH9Nb-CHbRoUNVOPwG/"
44
+ }
45
+ http_version:
46
+ recorded_at: Wed, 02 Sep 2020 14:02:37 GMT
47
+
48
+ - request:
49
+ method: post
50
+ uri: https://www.virustotal.com/_ah/upload/AMmfu6b-_DXUeFe36Sb3b0F4B8mH9Nb-CHbRoUNVOPwG/
51
+ body:
52
+ encoding: ASCII-8BIT
53
+ string: "------RubyFormBoundaryjv5FxFNLpwqDoUQA\r\nContent-Disposition: form-data;
54
+ name=\"filename\"\r\n\r\nnull_file\r\n------RubyFormBoundaryjv5FxFNLpwqDoUQA\r\nContent-Disposition:
55
+ form-data; name=\"file\"; filename=\"null_file\"\r\nContent-Type: text/plain\r\n\r\n\n\r\n------RubyFormBoundaryjv5FxFNLpwqDoUQA--\r\n"
56
+ headers:
57
+ Accept:
58
+ - "*/*"
59
+ User-Agent:
60
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
61
+ X-Apikey:
62
+ - testapikey
63
+ Content-Length:
64
+ - '282'
65
+ Content-Type:
66
+ - multipart/form-data; boundary=----RubyFormBoundaryjv5FxFNLpwqDoUQA
67
+ Accept-Encoding:
68
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
69
+ Host:
70
+ - www.virustotal.com
71
+ response:
72
+ status:
73
+ code: 200
74
+ message: OK
75
+ headers:
76
+ Cache-Control:
77
+ - no-cache
78
+ Content-Type:
79
+ - application/json; charset=utf-8
80
+ X-Cloud-Trace-Context:
81
+ - 9c3d1ae8f345c5ca8060a4b793174891
82
+ Date:
83
+ - Wed, 02 Sep 2020 14:02:36 GMT
84
+ Server:
85
+ - Google Frontend
86
+ Content-Length:
87
+ - '128'
88
+ body:
89
+ encoding: UTF-8
90
+ string: |-
91
+ {
92
+ "data": {
93
+ "id": "NjhiMzI5ZGE5ODkzZTM0MDk5YzdkOGFkNWNiOWM5NDA6MTU5OTA1NTM1Ng==",
94
+ "type": "analysis"
95
+ }
96
+ }
97
+ http_version:
98
+ recorded_at: Wed, 02 Sep 2020 14:02:37 GMT
99
+ recorded_with: VCR 5.0.0
data/test/fixtures/user_find.yml ADDED
@@ -0,0 +1,213 @@
1
+ ---
2
+ http_interactions:
3
+ - request:
4
+ method: get
5
+ uri: https://www.virustotal.com/api/v3/users/testapikey
6
+ body:
7
+ encoding: US-ASCII
8
+ string: ''
9
+ headers:
10
+ Accept:
11
+ - "*/*"
12
+ User-Agent:
13
+ - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
14
+ X-Apikey:
15
+ - testapikey
16
+ Content-Length:
17
+ - '0'
18
+ Content-Type:
19
+ - application/x-www-form-urlencoded
20
+ Accept-Encoding:
21
+ - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
22
+ Host:
23
+ - www.virustotal.com
24
+ response:
25
+ status:
26
+ code: 200
27
+ message: OK
28
+ headers:
29
+ Cache-Control:
30
+ - no-cache
31
+ Content-Type:
32
+ - application/json; charset=utf-8
33
+ X-Cloud-Trace-Context:
34
+ - 4ad711d6d44ea44146d4c06cb76589b1
35
+ Date:
36
+ - Mon, 05 Oct 2020 10:19:46 GMT
37
+ Server:
38
+ - Google Frontend
39
+ Content-Length:
40
+ - '5145'
41
+ body:
42
+ encoding: UTF-8
43
+ string: |-
44
+ {
45
+ "data": {
46
+ "attributes": {
47
+ "apikey": "testapikey",
48
+ "email": "granville@okeefehomenick.co",
49
+ "first_name": "Valdo",
50
+ "has_2fa": false,
51
+ "last_login": 1601883978,
52
+ "last_name": "Donati",
53
+ "preferences": {
54
+ "ui": {
55
+ "last_read_notification_date": 1599481553
56
+ }
57
+ },
58
+ "privileges": {
59
+ "cases": {
60
+ "granted": false
61
+ },
62
+ "click_to_accept": {
63
+ "granted": false
64
+ },
65
+ "creditcards": {
66
+ "granted": false
67
+ },
68
+ "dogfooder": {
69
+ "granted": false
70
+ },
71
+ "downloads-tier-1": {
72
+ "granted": false
73
+ },
74
+ "downloads-tier-2": {
75
+ "granted": false
76
+ },
77
+ "file-behaviour-feed": {
78
+ "granted": false
79
+ },
80
+ "file-feed": {
81
+ "granted": false
82
+ },
83
+ "file-feed-without-av-results": {
84
+ "granted": false
85
+ },
86
+ "intelligence": {
87
+ "granted": false
88
+ },
89
+ "intelligence-search-tier-1": {
90
+ "granted": false
91
+ },
92
+ "intelligence-search-tier-2": {
93
+ "granted": false
94
+ },
95
+ "intelligence-search-tier-3": {
96
+ "granted": false
97
+ },
98
+ "monitor": {
99
+ "granted": false
100
+ },
101
+ "monitor-partner": {
102
+ "granted": false
103
+ },
104
+ "private": {
105
+ "granted": false
106
+ },
107
+ "retrohunt-tier-1": {
108
+ "granted": false
109
+ },
110
+ "retrohunt-tier-2": {
111
+ "granted": false
112
+ },
113
+ "retrohunt-tier-3": {
114
+ "granted": false
115
+ },
116
+ "sales-staff": {
117
+ "granted": false
118
+ },
119
+ "staff": {
120
+ "granted": false
121
+ },
122
+ "url-feed": {
123
+ "granted": false
124
+ },
125
+ "vtalerts": {
126
+ "granted": false
127
+ },
128
+ "vtdiff-api": {
129
+ "granted": false
130
+ },
131
+ "vtdiff-ui": {
132
+ "granted": false
133
+ },
134
+ "vtgrep": {
135
+ "granted": false
136
+ },
137
+ "widget": {
138
+ "granted": false
139
+ }
140
+ },
141
+ "profile_phrase": "",
142
+ "quotas": {
143
+ "api_requests_daily": {
144
+ "allowed": 5760,
145
+ "used": 102
146
+ },
147
+ "api_requests_hourly": {
148
+ "allowed": 240,
149
+ "used": 0
150
+ },
151
+ "api_requests_monthly": {
152
+ "allowed": 1000000000,
153
+ "used": 105
154
+ },
155
+ "cases_creation_monthly": {
156
+ "allowed": 20,
157
+ "used": 0
158
+ },
159
+ "intelligence_downloads_monthly": {
160
+ "allowed": 0,
161
+ "used": 0
162
+ },
163
+ "intelligence_graphs_private": {
164
+ "allowed": 0,
165
+ "used": 0
166
+ },
167
+ "intelligence_hunting_rules": {
168
+ "allowed": 0,
169
+ "used": 0
170
+ },
171
+ "intelligence_retrohunt_jobs_monthly": {
172
+ "allowed": 0,
173
+ "used": 0
174
+ },
175
+ "intelligence_searches_monthly": {
176
+ "allowed": 0,
177
+ "used": 0
178
+ },
179
+ "intelligence_vtdiff_creation_monthly": {
180
+ "allowed": 0,
181
+ "used": 0
182
+ },
183
+ "monitor_storage_bytes": {
184
+ "allowed": 0,
185
+ "used": 0
186
+ },
187
+ "monitor_storage_files": {
188
+ "allowed": 0,
189
+ "used": 0
190
+ },
191
+ "monitor_uploaded_bytes": {
192
+ "allowed": 0,
193
+ "used": 0
194
+ },
195
+ "monitor_uploaded_files": {
196
+ "allowed": 0,
197
+ "used": 0
198
+ }
199
+ },
200
+ "reputation": 1,
201
+ "status": "active",
202
+ "user_since": 1512986169
203
+ },
204
+ "id": "granville",
205
+ "links": {
206
+ "self": "https://www.virustotal.com/api/v3/users/granville"
207
+ },
208
+ "type": "user"
209
+ }
210
+ }
211
+ http_version:
212
+ recorded_at: Mon, 05 Oct 2020 10:19:46 GMT
213
+ recorded_with: VCR 5.0.0