From 693363eaece0bb6e43c397dc74afa9357e2c34cf Mon Sep 17 00:00:00 2001
From: TKE <tobias.kessels@certbw.de>
Date: Thu, 13 Feb 2020 14:04:31 +0100
Subject: [PATCH] added vt_download.py

---
 vt_download.py | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100755 vt_download.py

diff --git a/vt_download.py b/vt_download.py
new file mode 100755
index 0000000..d15f7bc
--- /dev/null
+++ b/vt_download.py
@@ -0,0 +1,41 @@
+#!/usr/bin/python3
+import sys
+import pprint
+import requests
+import os.path
+
+
+# os.path.exists(file_path)
+
+
+out_sep=';'
+
+with open(os.path.expanduser('~/.virustotal_api_key')) as api_f:
+  api_key=api_f.readline().strip()
+
+
+hash=sys.argv[1]
+url = 'https://www.virustotal.com/vtapi/v2/file/download'
+params = {'apikey': api_key, 'hash':hash }
+headers = {
+  "Accept-Encoding": "gzip, deflate",
+  "User-Agent" : "gzip,python_requests,vt_pdns.py"
+  }
+
+
+
+
+try:
+    response = requests.get(url, params=params, headers=headers)
+    if response.ok:
+        with open(hash, 'wb') as f:
+            f.write(response.content)
+    else:
+        print("NOTFOUND:{}".format(hash))
+
+
+
+except requests.exceptions.ProxyError as e:
+    print("Proxy Error")
+    print(e)
+    exit(1)