HTTPRequestMemory

User_Russian · Post by **User_Russian** » Sat Oct 06, 2018 7:47 pm

Please tell me how to make this a POST request using HTTPRequestMemory. https://www.virustotal.com/documentatio ... ning-files
Thanks.

CELTIC88 · Post by **CELTIC88** » Sun Oct 07, 2018 4:50 pm

hi

with winhttp
Code:

Code: Select all

;By Celtic88 2016
;about : https://www.virustotal.com/fr/documentation/public-api/

EnableExplicit

#VirustotalAPIkey = "" ;here put your vapi key

#WorkMemorySize = 1024*24

Macro h
  Chr(34) 
EndMacro

Prototype.i WinHttpOpen(pwszUserAgent.p-unicode,
                        dwAccessType.l,
                        pwszProxyName.p-unicode,
                        pwszProxyBypass.p-unicode,
                        dwFlags.l )
Prototype.i WinHttpConnect(hSession.i,
                           pswzServerName.p-unicode,
                           nServerPort.l,
                           dwReserved.l)
Prototype.l WinHttpCloseHandle(hInternet.i)
Prototype.i WinHttpOpenRequest(hConnect.i,
                               pwszVerb.p-unicode,
                               pwszObjectName.p-unicode,
                               pwszVersion.p-unicode,
                               pwszReferrer.p-unicode,
                               *ppwszAcceptTypes,
                               dwFlags.l);
Prototype.l WinHttpSendRequest(hRequest.i,
                               pwszHeaders.p-unicode,
                               dwHeadersLength.l,
                               *lpOptional,
                               dwOptionalLength.l,
                               dwTotalLength.l,
                               *dwContext)
Prototype.l WinHttpReceiveResponse(hRequest.i,
                                   *lpReserved)
Prototype.l WinHttpSetOption(hInternet.i,
                             dwOption.l,
                             *lpBuffer,
                             dwBufferLength.l );
Prototype.l WinHttpQueryDataAvailable(hRequest.i,
                                      *lpdwNumberOfBytesAvailable)
Prototype.l WinHttpReadData(hRequest.i,
                            *lpBuffer,
                            dwNumberOfBytesToRead.l,
                            *lpdwNumberOfBytesRead);
Prototype.l WinHttpQueryHeaders(hRequest.i,
                                dwInfoLevel.l,
                                pwszName.p-unicode, 
                                *lpBuffer,
                                *lpdwBufferLength,
                                *lpdwIndex)
Prototype.l WinHttpWriteData(hRequest,
                             *lpBuffer,
                             dwNumberOfBytesToWrite.l,
                             *lpdwNumberOfBytesWritten)

Global winhttp_dll=OpenLibrary(#PB_Any,"winhttp.dll")
Global WinHttpOpen.WinHttpOpen=GetFunction(winhttp_dll,"WinHttpOpen")
Global WinHttpCloseHandle.WinHttpCloseHandle=GetFunction(winhttp_dll,"WinHttpCloseHandle")
Global WinHttpConnect.WinHttpConnect=GetFunction(winhttp_dll,"WinHttpConnect")
Global WinHttpOpenRequest.WinHttpOpenRequest=GetFunction(winhttp_dll,"WinHttpOpenRequest")
Global WinHttpSendRequest.WinHttpSendRequest=GetFunction(winhttp_dll,"WinHttpSendRequest")
Global WinHttpReceiveResponse.WinHttpReceiveResponse=GetFunction(winhttp_dll,"WinHttpReceiveResponse")
Global WinHttpSetOption.WinHttpSetOption=GetFunction(winhttp_dll,"WinHttpSetOption")
Global WinHttpReadData.WinHttpReadData=GetFunction(winhttp_dll,"WinHttpReadData")
Global WinHttpQueryDataAvailable.WinHttpQueryDataAvailable=GetFunction(winhttp_dll,"WinHttpQueryDataAvailable")
Global WinHttpQueryHeaders.WinHttpQueryHeaders=GetFunction(winhttp_dll,"WinHttpQueryHeaders")
Global WinHttpWriteData.WinHttpWriteData=GetFunction(winhttp_dll,"WinHttpWriteData")

#INTERNET_SCHEME_HTTPS_WINHTTP                                                   =2
#WINHTTP_ACCESS_TYPE_DEFAULT_PROXY                                        =0
#WINHTTP_NO_PROXY_NAME                                                                     =#Null$
#WINHTTP_NO_PROXY_BYPASS                                                                  =#Null$
#WINHTTP_FLAG_ESCAPE_DISABLE                                                           = $00000040
#WINHTTP_NO_REFERER                                                                                 = #Null$
#WINHTTP_DEFAULT_ACCEPT_TYPES                                                       =#Null
#WINHTTP_NO_REQUEST_DATA                                                                  =#Null

Threaded VirustotalhSession,VirustotalhConnect

Procedure.s GetHashFile(File$)
  Protected Rdf=ReadFile(#PB_Any,File$)
  If Rdf
    Protected *Dataf=AllocateMemory(#WorkMemorySize)
    If *Dataf
      #PROV_RSA_AES = 24
      #CRYPT_VERIFYCONTEXT = $F0000000
      #CALG_MD5 = $00008003
      #HP_HASHSIZE = $0004
      #HP_HASHVAL = $0002
      Protected hProv,hHash,*ihash, iDataLen.l,iDataLenType.l,iReturn$,o.l,Rd.l
      CryptAcquireContext_(@hProv, #Null, #Null, #PROV_RSA_AES, #CRYPT_VERIFYCONTEXT)
      If hProv
        CryptCreateHash_(hProv, #CALG_MD5, 0, 0, @hHash)
        If hHash
          While Eof(Rdf)=0
            Rd=ReadData(Rdf,*Dataf,#WorkMemorySize)
            CryptHashData_(hHash, *Dataf, Rd, 1)
          Wend
          iDataLenType=4
          CryptGetHashParam_(hHash,#HP_HASHSIZE,@iDataLen,@iDataLenType,0)
          If iDataLen
            iDataLenType=iDataLen
            CryptGetHashParam_(hHash,#HP_HASHVAL,*Dataf,@iDataLenType,0)
            For o=0 To iDataLenType-1
              iReturn$+ RSet(Hex(PeekA(*Dataf+o),#PB_Ascii), 2, "0")
            Next
          EndIf
          CryptDestroyHash_(hHash)
        EndIf
        CryptReleaseContext_(hProv, 0)
      EndIf
      FreeMemory(*Dataf)
    EndIf
    CloseFile(Rdf)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Procedure Virustotal_Connect()
  VirustotalhSession = WinHttpOpen("", #WINHTTP_ACCESS_TYPE_DEFAULT_PROXY, #WINHTTP_NO_PROXY_NAME,#WINHTTP_NO_PROXY_BYPASS,0)
  If VirustotalhSession
    VirustotalhConnect =WinHttpConnect(VirustotalhSession,"www.virustotal.com",80,0)
    If Not VirustotalhConnect:WinHttpCloseHandle(VirustotalhSession):VirustotalhSession=0:ProcedureReturn 0:EndIf
    ProcedureReturn VirustotalhConnect
  EndIf
EndProcedure

Procedure Virustotal_Close()
  If VirustotalhSession:WinHttpCloseHandle(VirustotalhSession):EndIf
  If VirustotalhConnect:WinHttpCloseHandle(VirustotalhConnect):EndIf
EndProcedure

Procedure.s Virustotal_ScanFile(FileToScan$)
  Protected iReturn$,iDatelen.l,*m,Rcv.l,iRead.l,p.l
  Protected sBoundary$="--------Boundary"
  Protected sHeaders$ = "Content-Type: multipart/form-data; boundary=" + sBoundary$ + #CRLF$
  Protected sData$ = "--" + sBoundary$ + #CRLF$
  sData$ + "Content-Disposition: form-data; name=" + h + "apikey" + h + #CRLF$ + #CRLF$ + #VirustotalAPIkey + #CRLF$
  sData$ + "--" + sBoundary$ + #CRLF$
  sData$ + "Content-Disposition: form-data; name=" +h+ "file" +h + "; filename="+h+ GetFilePart(FileToScan$,#PB_FileSystem_NoExtension) +h + #CRLF$ + "Content-Type: application/octet-stream" + #CRLF$ + #CRLF$
  Protected EndData$ = #CRLF$ +"--" + sBoundary$ + "--" + #CRLF$
  
  Protected Rdf =ReadFile(#PB_Any,FileToScan$)
  If Rdf
    Protected SizeData.l=Lof(Rdf)+StringByteLength(sData$ ,#PB_Ascii)+StringByteLength(EndData$ ,#PB_Ascii)
    Protected  *iData = AllocateMemory(#WorkMemorySize)
    If *iData
      Protected hRequest=WinHttpOpenRequest(VirustotalhConnect,"Post","/vtapi/v2/file/scan","HTTP/1.1",#WINHTTP_NO_REFERER,#WINHTTP_DEFAULT_ACCEPT_TYPES,#WINHTTP_FLAG_ESCAPE_DISABLE)
      If hRequest
        WinHttpSendRequest(hRequest,sHeaders$,Len(sHeaders$),#WINHTTP_NO_REQUEST_DATA, 0,SizeData,0)
        
        PokeS(*iData,sData$,-1,#PB_Ascii)
        WinHttpWriteData(hRequest,*iData,StringByteLength(sData$ ,#PB_Ascii),0)
        For p=0 To Lof(Rdf) Step #WorkMemorySize
          iRead= ReadData(Rdf,*iData, #WorkMemorySize)
          WinHttpWriteData(hRequest,*iData,iRead,0)
          Debug "Send :"+Str(iRead)
        Next
        PokeS(*iData,EndData$,-1,#PB_Ascii)
        WinHttpWriteData(hRequest,*iData,StringByteLength(EndData$ ,#PB_Ascii),0)
        
        WinHttpReceiveResponse(hRequest,0)
        While WinHttpQueryDataAvailable(hRequest,@iDatelen) = 1 And iDatelen > 0
          *m=ReAllocateMemory(*m,Rcv+iDatelen)
          WinHttpReadData(hRequest,*m+Rcv,iDatelen,0)
          Rcv+iDatelen
        Wend
        
        If *m
          iReturn$= PeekS(*m,Rcv,#PB_Ascii)
          FreeMemory(*m)
        EndIf
        
        WinHttpCloseHandle(hRequest)
      EndIf
      FreeMemory(*iData)
    EndIf
    CloseFile(Rdf)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Procedure.s Virustotal_Get(HashFile$,sCommand$,sType$="resource")
  Protected iReturn$,iDatelen.l,*m,Rcv.l
  Protected *iData = Ascii(sType$+"=" + HashFile$ + "&key=" + #VirustotalAPIkey)
  If *iData
    Protected sHeaders$ = "Content-Type: application/x-www-form-urlencoded" + #CRLF$
    Protected hRequest=WinHttpOpenRequest(VirustotalhConnect,"Post","/vtapi/v2/"+sCommand$,"HTTP/1.1",#WINHTTP_NO_REFERER,#WINHTTP_DEFAULT_ACCEPT_TYPES,#WINHTTP_FLAG_ESCAPE_DISABLE)
    If hRequest
      WinHttpSendRequest(hRequest,sHeaders$,Len(sHeaders$),*iData,MemorySize(*iData)-1,MemorySize(*iData)-1,0)
      WinHttpReceiveResponse(hRequest,0)
      
      While WinHttpQueryDataAvailable(hRequest,@iDatelen) = 1 And iDatelen > 0
        *m=ReAllocateMemory(*m,Rcv+iDatelen)
        WinHttpReadData(hRequest,*m+Rcv,iDatelen,0)
        Rcv+iDatelen
      Wend
      
      If *m
        iReturn$= PeekS(*m,Rcv,#PB_Ascii)
        FreeMemory(*m)
      EndIf
      
      WinHttpCloseHandle(hRequest)
    EndIf
    FreeMemory(*iData)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Macro Virustotal_GetReportFile(HashFile)
  Virustotal_Get(HashFile,"file/report")
EndMacro

Macro Virustotal_RescanFile(HashFile)
  Virustotal_Get(HashFile,"file/rescan")
EndMacro

Macro Virustotal_ScanUrl(Url)
  Virustotal_Get(Url,"url/scan","url")
EndMacro

Macro Virustotal_GetReportUrl(Url)
  Virustotal_Get(Url,"url/report")
EndMacro

Virustotal_Connect()
Define HashFile$ =GetHashFile("virus.exe")
Debug HashFile$
Debug Virustotal_ScanFile("virus.exe")
Debug Virustotal_GetReportFile(HashFile$)
Debug Virustotal_ScanUrl("www.purebasic.fr")
Debug Virustotal_GetReportUrl("www.purebasic.fr")

pb version

Code: Select all

;By Celtic88
;about : https://www.virustotal.com/fr/documentation/public-api/

EnableExplicit
InitNetwork() 
UseMD5Fingerprint()

#VirustotalAPIkey = "" ; here put your vapi key

#WorkMemorySize = 1024*24; 24Kb

Macro h
  Chr(34) 
EndMacro

Macro ScanFileRequest(Content_Length,DataBoundary)
  "POST /vtapi/v2/file/scan HTTP/1.1" +#CRLF$ +
                                       "Connection: Close" +#CRLF$ +
                                       "Content-Type: multipart/form-data; boundary=--------Boundary" +#CRLF$ +
                                       "Content-Length: "+ Str(Content_Length) +#CRLF$ +
                                       "Host: www.virustotal.com" +#CRLF$ +#CRLF$+
                                       DataBoundary
EndMacro

Macro SimpleRequest(file,sData)
  "POST /vtapi/v2/" +file+ " HTTP/1.1" +#CRLF$ +
                     "Connection: Close" +#CRLF$ +
                     "Content-Type: application/x-www-form-urlencoded" +#CRLF$ +
                     "Content-Length: " +Str(Len(sData)) +#CRLF$ +
                     "Host: www.virustotal.com"+#CRLF$ +#CRLF$ +
                     sData
EndMacro 

Procedure.s GetHashFile(File$)
  Protected Rdf=ReadFile(#PB_Any,File$)
  If Rdf
    Protected *Dataf=AllocateMemory(#WorkMemorySize)
    If *Dataf
      Protected fmd5 = StartFingerprint(#PB_Any, #PB_Cipher_MD5) 
      If fmd5
        Protected Rd.l,iReturn$
        While Eof(Rdf)=0
          Rd=ReadData(Rdf,*Dataf,#WorkMemorySize)
          AddFingerprintBuffer(fmd5, *Dataf, Rd)   
        Wend
        iReturn$=  FinishFingerprint(fmd5) 
      EndIf
      FreeMemory(*Dataf)
    EndIf
    CloseFile(Rdf)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Procedure.s Virustotal_ScanFile(FileToScan$)
  Protected Rdf =ReadFile(#PB_Any,FileToScan$)
  If Rdf
    Protected  *iData = AllocateMemory(#WorkMemorySize)
    If *iData
      Protected hConnect =OpenNetworkConnection("www.virustotal.com",80)
      If hConnect
        Protected DataBoundary$=    "----------Boundary" +#CRLF$ +
                                    "Content-Disposition: form-data; name="+h+"apikey"+h+ #CRLF$ +#CRLF$ +
                                    #VirustotalAPIkey +#CRLF$ +
                                    "----------Boundary" +#CRLF$ +
                                    "Content-Disposition: form-data; name="+h+"file"+h+"; filename="+h+ GetFilePart(FileToScan$)  +h +#CRLF$ +
                                    "Content-Type: " + "application/octet-stream" +#CRLF$ +#CRLF$
        Protected DataEnfBoundary$=#CRLF$ +"----------Boundary--" + #CRLF$
        Protected Content_Length = Lof(Rdf)+StringByteLength(DataBoundary$ ,#PB_Ascii)+StringByteLength(DataEnfBoundary$ ,#PB_Ascii)
        SendNetworkString(hConnect,ScanFileRequest(Content_Length,DataBoundary$), #PB_Ascii)
        Protected p.l, iRead.l,Ev, *m, iReturn$,Rcv.l
        For p=0 To Lof(Rdf) Step #WorkMemorySize
          iRead= ReadData(Rdf,*iData, #WorkMemorySize)
          While (SendNetworkData(hConnect,*iData,iRead) < 1) 
            If NetworkClientEvent(hConnect) = #PB_NetworkEvent_Disconnect:Break 2:EndIf
            Delay(50)
          Wend
          Debug "Send :"+Str(iRead)
        Next
        SendNetworkString(hConnect,DataEnfBoundary$, #PB_Ascii)
        Repeat
          Delay(50)
          Ev=NetworkClientEvent(hConnect) 
        Until Ev = #PB_NetworkEvent_Data Or Ev = #PB_NetworkEvent_Disconnect; you can place a timeout!
        
        While NetworkClientEvent(hConnect) <> #PB_NetworkEvent_Disconnect ; get Request response
          iRead=ReceiveNetworkData(hConnect,*iData,#WorkMemorySize)
          If iRead
            *m=ReAllocateMemory(*m,Rcv+iRead)
            If *m
              CopyMemory(*iData, *m+Rcv, iRead)
              Rcv+iRead
            EndIf
          EndIf
        Wend
        
        If *m
          iReturn$= PeekS(*m,Rcv,#PB_Ascii)
          iReturn$=Mid(iReturn$,FindString(iReturn$, #CRLF$ +#CRLF$ )+4) 
          FreeMemory(*m)
        EndIf
        
        CloseNetworkConnection(hConnect)
      EndIf
      FreeMemory(*iData)
    EndIf
    CloseFile(Rdf)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Procedure.s Virustotal_Get(HashFile$,sCommand$,sType$="resource")
  Protected iReturn$,Ev,Rcv.l,tRcv.l
  Protected *iData = AllocateMemory(#WorkMemorySize)
  If *iData
    Protected hConnect =OpenNetworkConnection("www.virustotal.com",80)
    If hConnect
      SendNetworkString(hConnect,SimpleRequest(sCommand$, sType$+"=" + HashFile$ + "&key=" + #VirustotalAPIkey), #PB_Ascii)
      Repeat
        Delay(50)
        Ev=NetworkClientEvent(hConnect) 
      Until Ev = #PB_NetworkEvent_Data Or Ev = #PB_NetworkEvent_Disconnect
      While NetworkClientEvent(hConnect) <> #PB_NetworkEvent_Disconnect
        tRcv=ReceiveNetworkData(hConnect,*iData+Rcv,#WorkMemorySize)
        If tRcv
          Rcv+tRcv
          *iData=ReAllocateMemory(*iData,Rcv+(#WorkMemorySize))
          If Not *iData:Break:EndIf
        EndIf
      Wend
      If *iData
        iReturn$= PeekS(*iData,Rcv,#PB_Ascii)
        iReturn$=Mid(iReturn$,FindString(iReturn$, #CRLF$ +#CRLF$ )+4) 
      EndIf
      CloseNetworkConnection(hConnect)
    EndIf
    FreeMemory(*iData)
  EndIf
  ProcedureReturn iReturn$
EndProcedure

Macro Virustotal_GetReportFile(HashFile); Get scanned File Report!
  Virustotal_Get(HashFile,"file/report")
EndMacro

Macro Virustotal_RescanFile(HashFile)
  Virustotal_Get(HashFile,"file/rescan")
EndMacro

Macro Virustotal_ScanUrl(Url)
  Virustotal_Get(Url,"url/scan","url")
EndMacro

Macro Virustotal_GetReportUrl(Url)
  Virustotal_Get(Url,"url/report")
EndMacro

Define HashFile$ =GetHashFile("virus.exe")
Debug HashFile$
Debug Virustotal_ScanFile("virus.exe")
Debug Virustotal_GetReportFile(HashFile$)
Debug Virustotal_ScanUrl("www.purebasic.fr")
Debug Virustotal_GetReportUrl("www.purebasic.fr")

infratec · Post by **infratec** » Sun Oct 07, 2018 6:54 pm

Hi,

@Celtic: This was not the answer to the question.
I can also post a curl example.

Since I have no API key I can not test it:

Code: Select all

InitNetwork()

Filename$ = OpenFileRequester("Choose a file", "", "All|*.*", 0)
If Filename$
  
  File = ReadFile(#PB_Any, Filename$)
  If File
    *Buffer = AllocateMemory(Lof(File), #PB_Memory_NoClear)
    If *Buffer
      If ReadData(File, *Buffer, MemorySize(*Buffer)) = MemorySize(*Buffer)
        
        NewMap Header$()
        Header$("apikey") = "yourkey"
        Header$("file") = GetFilePart(Filename$)
        Header$("Content-Length") = Str(MemorySize(*Buffer))
        
        HttpRequest = HTTPRequestMemory(#PB_HTTP_Post, "https://www.virustotal.com/vtapi/v2/file/scan", *Buffer, MemorySize(*Buffer),0, Header$())
        If HttpRequest
          Debug "ErrorCode = "+ HTTPInfo(HTTPRequest, #PB_HTTP_ErrorCode)
          Debug "Response = " + HTTPInfo(HTTPRequest, #PB_HTTP_Response)
          
          ; Even in NoAsynchronous mode, FinishHTTP() must be called
          FinishHTTP(HttpRequest)
        EndIf
      EndIf
      FreeMemory(*Buffer)
    EndIf
    CloseFile(File)
  EndIf
EndIf

Bernd

User_Russian · Post by **User_Russian** » Sun Oct 07, 2018 7:44 pm

Unfortunately not working. ErrorCode = 403.
Probably need another method to send the file name and apikey.
This code normally sends a link to the scan. https://www.virustotal.com/ru/documenta ... nning-urls

Code: Select all

InitNetwork()

s.s="apikey="+"yourkey"+"&url=https://www.virustotal.com"

HttpRequest = HTTPRequest(#PB_HTTP_Post, "https://www.virustotal.com/vtapi/v2/url/scan", s)
If HttpRequest
  Debug "ErrorCode = "+ HTTPInfo(HTTPRequest, #PB_HTTP_ErrorCode)
  Debug "Response = " + HTTPInfo(HTTPRequest, #PB_HTTP_Response)
  
  ; Even in NoAsynchronous mode, FinishHTTP() must be called
  FinishHTTP(HttpRequest)
EndIf

This does not work - ErrorCode = 403.

Code: Select all

InitNetwork()

NewMap Header$()
Header$("apikey") = "yourkey"
Header$("url") = "url=https://www.virustotal.com"

HttpRequest = HTTPRequest(#PB_HTTP_Post, "https://www.virustotal.com/vtapi/v2/url/scan", "", 0, Header$())
If HttpRequest
  Debug "ErrorCode = "+ HTTPInfo(HTTPRequest, #PB_HTTP_ErrorCode)
  Debug "Response = " + HTTPInfo(HTTPRequest, #PB_HTTP_Response)
  
  ; Even in NoAsynchronous mode, FinishHTTP() must be called
  FinishHTTP(HttpRequest)
EndIf

infratec · Post by **infratec** » Sun Oct 07, 2018 9:06 pm

Your link points to a different section.
So what do you want:

Sending and scanning files
Or
Sending and scanning URLs

I thought you want the first one.

Ok, I see...
It expects a multipart form.
The apikey is no in the http header, it is in the first part of the post message.

So you need something like

Code: Select all

#Boundary$ = "----123456789"

...

Header$("Content-Type") = "multipart/form-Data; boundary=" + #Boundary$

...

And in your *Buffer you need 2 sections diverted via the boundary string.
In the first one is the api key
In the second one is the file data.

Best is to use wireshark and show the packet of

curl -v -F 'file=@/path/to/file' -F \
apikey=${VT_API_KEY} https://www.virustotal.com/vtapi/v2/file/scan

Then you see what's needed.

User_Russian · Post by **User_Russian** » Sun Oct 07, 2018 9:28 pm

infratec wrote:Sending and scanning files

Yes.
An example of sending an URL, in order to clarify that the apikey and other parameters, must be transmitted in a message, and not in the header.

infratec wrote:So you need something like

This is the difficulty. It is necessary to make a POST request correctly.

infratec wrote:Best is to use wireshark and show the packet of

This is probably for Linux. I have Windows and no curl.

infratec · Post by **infratec** » Mon Oct 08, 2018 6:58 am

https://curl.haxx.se/windows/

infratec · Post by **infratec** » Mon Oct 08, 2018 7:23 am

Maybe this works:

Code: Select all

EnableExplicit

#APIKey$ = "xxxxxxx"
#Boundary$ = "----0123456789"


Define.i File, HttpRequest, PostLen, FileLen, BoundaryLen
Define Filename$, Post$
Define *Buffer
Define NewMap Header$()

InitNetwork()

Filename$ = OpenFileRequester("Choose a file", "", "All|*.*", 0)
If Filename$
  
  File = ReadFile(#PB_Any, Filename$)
  If File
    FileLen = Lof(File)
    
    Header$("Content-Type") = "multipart/form-data; boundary=" + #Boundary$
    
    Post$ = "--" + #Boundary$ + #CRLF$
    Post$ + "Content-Disposition: form-data; name=apikey" + #CRLF$
    Post$ + #CRLF$
    Post$ + #APIKey$ + #CRLF$
    
    Post$ + "--" + #Boundary$ + #CRLF$
    Post$ + "Content-Disposition: form-data; name=file; filename=" + GetFilePart(Filename$) + #CRLF$
    Post$ + "Content-Type: application/octet-stream" + #CRLF$
    Post$ + #CRLF$
    
    PostLen = StringByteLength(Post$, #PB_UTF8)
    
    BoundaryLen = StringByteLength(#Boundary$, #PB_UTF8)
    
    *Buffer = AllocateMemory(PostLen + FileLen + 2 + 2 + BoundaryLen + 2 + 2, #PB_Memory_NoClear)
    If *Buffer
      PokeS(*Buffer, Post$, -1, #PB_UTF8|#PB_String_NoZero)
      
      If ReadData(File, *Buffer + PostLen, FileLen) = FileLen
        
        PokeS(*Buffer + PostLen + FileLen, #CRLF$ + "--" + #Boundary$ + "--" + #CRLF$, -1, #PB_UTF8|#PB_String_NoZero)
      
        Header$("Content-Length") = Str(MemorySize(*Buffer))
        
        HttpRequest = HTTPRequestMemory(#PB_HTTP_Post, "https://www.virustotal.com/vtapi/v2/file/scan", *Buffer, MemorySize(*Buffer), 0, Header$())
        If HttpRequest
          Debug "ErrorCode = "+ HTTPInfo(HTTPRequest, #PB_HTTP_ErrorCode)
          Debug "Response = " + HTTPInfo(HTTPRequest, #PB_HTTP_Response)
          
          ; Even in NoAsynchronous mode, FinishHTTP() must be called
          FinishHTTP(HttpRequest)
        EndIf
      EndIf
      FreeMemory(*Buffer)
    EndIf
    CloseFile(File)
  EndIf
EndIf

Bernd

infratec · Post by **infratec** » Mon Oct 08, 2018 8:11 am

Fixed some bugs with the boundary stuff.
Please try it.

User_Russian · Post by **User_Russian** » Mon Oct 08, 2018 10:00 pm

infratec wrote:Maybe this works

This code works great.
Thanks!

drgolf · Post by **drgolf** » Wed Oct 19, 2022 2:22 pm

Hello everybody,

The last code of master Infratec work great with Virus Total APi V2 but not with V3.

I change the code with the new URL for V3 but it ask header x-apikey...

I try without success.

Anybody can help ?

My code :

Code: Select all

EnableExplicit
#APIKey$ = "xxxxxxx"
#Boundary$ = "----0123456789"


Define.i File, HttpRequest, PostLen, FileLen, BoundaryLen
Define Filename$, Post$
Define *Buffer
Define NewMap Header$()

CompilerIf #PB_Compiler_Version<6
  InitNetwork()
CompilerEndIf


Filename$ = OpenFileRequester("Choose a file", "", "All|*.*", 0)
If Filename$
  
  File = ReadFile(#PB_Any, Filename$)
  If File
    FileLen = Lof(File)
    
    Header$("Content-Type") = "multipart/form-data; boundary=" + #Boundary$
    
    ;Post$ = "--" + #Boundary$ + #CRLF$
    ;Post$ + "Content-Disposition: form-data; name=x-apikey" + #CRLF$
    ;Post$ + #CRLF$
    ;Post$ + #APIKey$ + #CRLF$
    
    Post$ + "--" + #Boundary$ + #CRLF$
    Post$ + "Content-Disposition: form-data; name=file; filename=" + GetFilePart(Filename$) + #CRLF$
    Post$ + "Content-Type: application/octet-stream" + #CRLF$
    Post$ + #CRLF$
    
    PostLen = StringByteLength(Post$, #PB_UTF8)
    
    BoundaryLen = StringByteLength(#Boundary$, #PB_UTF8)
    
    *Buffer = AllocateMemory(PostLen + FileLen + 2 + 2 + BoundaryLen + 2 + 2, #PB_Memory_NoClear)
    If *Buffer
      PokeS(*Buffer, Post$, -1, #PB_UTF8|#PB_String_NoZero)
      
      If ReadData(File, *Buffer + PostLen, FileLen) = FileLen
        
        PokeS(*Buffer + PostLen + FileLen, #CRLF$ + "--" + #Boundary$ + "--" + #CRLF$, -1, #PB_UTF8|#PB_String_NoZero)
      
        Header$("Content-Length") = Str(MemorySize(*Buffer))
        
        Header$("X-Apikey")=#APIKey$ ;; needed ???
        
        HttpRequest = HTTPRequestMemory(#PB_HTTP_Post, "https://www.virustotal.com/api/v3/files", *Buffer, MemorySize(*Buffer), 0, Header$())
        If HttpRequest
          Debug "ErrorCode = "+ HTTPInfo(HTTPRequest, #PB_HTTP_ErrorMessage)
          Debug "Response = " + HTTPInfo(HTTPRequest, #PB_HTTP_Response)
          
          ; Even in NoAsynchronous mode, FinishHTTP() must be called
          FinishHTTP(HttpRequest)
        EndIf
      EndIf
      FreeMemory(*Buffer)
    EndIf
    CloseFile(File)
  EndIf
EndIf

infratec · Post by **infratec** » Wed Oct 19, 2022 2:50 pm

Of course you need:

Code: Select all

Header$("x-apikey") = #APIKey$

And if you read the documentation:
https://developers.virustotal.com/reference/files-scan

You also need:

Code: Select all

Header$("accept") = "application/json"

Since I have no API key, I can not test something.

If you select 'Ruby' on the above mentioned website, and select a small file, then you can see code, which is nearly identical to the needed PB code.

drgolf · Post by **drgolf** » Wed Oct 19, 2022 3:27 pm

Thanx for your response.

I have set header$("accept") and i have this response :

ErrorCode =
Response = {
"data": {
"type": "analysis",
"id": "YWVhZDlkZjE2NTE2NTBhNzE1MmJhM2QwN2NhMThhZmI6MTY2NjE4OTM2NA=="
}
}

That is not the same with V2 API... Is it normal ?
Is it base64 encoding ? Of what ?

infratec · Post by **infratec** » Wed Oct 19, 2022 4:40 pm

All reponses are described on the website I wrote above.

But what is returned on this page if you choose the same file?

infratec · Post by **infratec** » Wed Oct 19, 2022 4:57 pm

After you get the id, you have to get the report:

https://developers.virustotal.com/reference/file-info

PureBasic Forums - English

HTTPRequestMemory

HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory

Re: HTTPRequestMemory