Create a gist now

Instantly share code, notes, and snippets.

What would you like to do?
Python script to interface with totalhash.com
#!/usr/bin/env python
import sys
import html2text
from optparse import OptionParser
import httplib
import urllib2
import re
message = '\nPython script search totalhash.com see http://totalhash.com/help/ for examples'
parser = OptionParser(message)
parser.add_option('-r', '--report', dest='r', help='print out analysis report ./totalhash.py -r sha256', action='store')
parser.add_option('-s', '--search', dest='s', help='search totalhash ./totalhash.py -s ip:127.0.0.1 (search terms: av: dnsrr: email: filename: hash: ip: mutex: pdb: registry: url: useragent: version: )', action='store')
(options, args) = parser.parse_args()
if len(sys.argv)==1:
parser.print_help()
sys.exit(1)
if options.s:
request = urllib2.Request('http://totalhash.com/search/%s' % options.s)
opener = urllib2.build_opener()
request.add_header('User-Agent', 'Mozilla/4.0 (compatible; MSIE+8.0; Windows NT 5.1; Trident/4.0;)')
data = opener.open(request).read()
results = re.findall("\x3ch3\x3eDisplaying.*?of (.*?) results\x3c\x2fh3\x3e", data, re.DOTALL)
total = results[0]
if total is '0':
print "\n[Total results - %s]" % total
else:
print "\n[Total results - %s]" % total
c = '0'
print "\nTimestamp, sha1, packer"
while int(c) < int(total):
request = urllib2.Request('http://totalhash.com/search/%s/%s' % (options.s, c))
opener = urllib2.build_opener()
request.add_header('User-Agent', 'Mozilla/4.0 (compatible; MSIE+8.0; Windows NT 5.1; Trident/4.0;)')
data = opener.open(request).read()
e = re.findall("href\x3d\x22/analysis/(.*?)\x22\x3e.*?\x3ctd.*?width\x3d15\x25\x3e(.*?)\x3c\x2ftd\x3e.*?\x3c\x2ftd\x3e.*?\x3ctd\x3e.*?\x3c\x2ftd\x3e.*?\x3ctd\x3e(.*?)\x3c\x2ftd\x3e", data, re.DOTALL)
if e:
c = int(c) + 20
for m in e:
print "%s, %s, %s" % (m[1],m[0],m[2])
else:
print "[No results found]"
if options.r:
request = urllib2.Request('http://totalhash.com/analysis/%s' % options.r)
opener = urllib2.build_opener()
request.add_header('User-Agent', 'Mozilla/4.0 (compatible; MSIE+8.0; Windows NT 5.1; Trident/4.0;)')
data = opener.open(request).read()
d = data.decode('utf-8').strip()
e = re.findall("\x3ctable class\x3d\x22analysis\x22\x3e(.*?)\x3c\x2fdiv\x3e\x3c\x21\x2d\x2d \x23content \x2d\x2d\x3e", d, re.DOTALL)
if e:
print html2text.html2text(e[0])
else:
print "[No results found]"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment