cowrie/cowrie
1
0
Fork 0
mirror of https://github.com/cowrie/cowrie.git synced 2025-07-01 18:07:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

upload every file to VT

Browse Source
This commit is contained in:
Michel Oosterhof
2016-01-05 23:55:31 +04:00
parent 1d5c7f5dac
commit 1b21106725
1 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
cowrie/output/virustotal.py
View File

@ -34,7 +34,9 @@ Work in Progress - not functional yet
from zope.interface import implementer
import json
import os
import urllib
import urlparse
from twisted.python import log
from twisted.web.iweb import IBodyProducer
@ -75,9 +77,17 @@ class Output(cowrie.core.output.Output):
log.msg("Sending url to VT")
self.posturl(entry["url"])
elif entry["eventid"] == 'COW0017':
log.msg("Sending SFTP file to VT")
self.postfile(entry["outfile"], entry["filename"])
log.msg("Sending file to VT")
p = urlparse.urlparse(entry["url"]).path
if p == "":
fileName = entry["shasum"]
else:
b = os.path.basename(p)
if b == "":
fileName = entry["shasum"]
else:
fileName = b
self.postfile(entry["outfile"], fileName)
def postfile(self, artifact, fileName):