malwaredb-virustotal 0.5.5

Logic and datatypes for interacting with VirusTotal
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

## Virus Total Client
[![Test](https://github.com/malwaredb/vt-client/actions/workflows/test.yml/badge.svg)](https://github.com/malwaredb/vt-client/actions/workflows/test.yml)
[![Lint](https://github.com/malwaredb/vt-client/actions/workflows/lint.yml/badge.svg)](https://github.com/malwaredb/vt-client/actions/workflows/lint.yml)
[![Documentation](https://docs.rs/malwaredb-virustotal/badge.svg)](https://docs.rs/malwaredb-virustotal/)
[![Crates.io Version](https://img.shields.io/crates/v/malwaredb-virustotal)](https://crates.io/crates/malwaredb-virustotal)
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/malwaredb/vt-client/badge)](https://securityscorecards.dev/viewer/?uri=github.com/malwaredb/vt-client)
[![Socket Badge](https://badge.socket.dev/cargo/package/malwaredb-virustotal/latest)](https://socket.dev/cargo/package/malwaredb-virustotal/overview/)

This is logic for interacting with [VirusTotal](https://www.virustotal.com)'s [V3 API](https://virustotal.readme.io/reference/overview). At present, only the following actions are supported:
* Fetch file, IP address, and domain reports: this gets the anti-virus scan and other data for a given sample, and there are examples in the `testdata/` directory.
  * The goal is for the file report to have all the possible fields for increased ease of use.
* Request re-scan: ask Virus Total to run a given item through their collection of anti-virus applications and analysis tools.
* Submit a file sample: send a sample to Virus Total for analysis.
* Download a file sample: download the original sample from Virus Total (not fully tested, requires premium access).
* Search: find the hashes of files which match some search criteria (not fully tested, requires premium access, uses older V2 API). See Virus Total's [doc](https://virustotal.readme.io/v2.0/reference/file-search) for more information.
* The file report object and error types can be useful when interacting with Virus Total using another crate or using VT's API directly; you don't have to use the client object in this crate to use the data (and error) types in this crate.

Virus Total supports these actions given a MD5, SHA-1, or SHA-256 hash.

Additionally, this provides a client application (in `bin/`, or [malwaredb-virustotal-bin](https://crates.io/crates/malwaredb-virustotal-bin)) for the supported operations on the command line.

### MUSL Targets
It's recommended to use the `native-tls-vendored` feature to avoid OpenSSL build errors when compiling for Linux [MUSL](https://musl.libc.org/) targets. See the example `Cargo.toml` entry below:

```toml
[target.'cfg(target_env = "musl")'.dependencies]
malwaredb-virustotal = { version = "0.5", features = ["native-tls-vendored"] }
```