id: api-virustotal

info:
  name: VirusTotal API Test
  author: daffainfo
  severity: info
  reference:
    - https://developers.virustotal.com/reference
    - https://github.com/daffainfo/all-about-apikey/blob/main/Anti%20Malware/VirusTotal.md
  metadata:
    max-request: 1
  tags: token-spray,virustotal

self-contained: true

http:
  - raw:
      - |
        POST https://www.virustotal.com/vtapi/v2/url/scan HTTP/1.1
        Host: www.virustotal.com
        Content-Type: application/x-www-form-urlencoded
        Content-Length: 86

        apikey={{token}}&url=google.com

    matchers:
      - type: word
        part: body
        words:
          - '"verbose_msg":'
          - '"scan_date":'
          - '"permalink":'
        condition: and
# digest: 4a0a00473045022006e2a8f2d6b688f730d22fa3fe879c3f36412b28f8818e8c8605f0b47cd26b5c022100b386b1bc6ab5d43d23f18abbe32534640874595136fed86274c8ca05732d9c9c:922c64590222798bb761d5b6d8e72950