sample-finder 1.0.0.9

Sample Finder is a modular tool to search for and download malware samples from public malware sources.

Sample Finder

Sample Finder is a modular tool to search for and download malware samples from public malware sources.

Supported sources

• Malpedia
• MalShare
• Malware Bazaar
• VirusShare
• VirusTotal
• Triage

Installation

Pip

$ pip install sample-finder

$ git clone [e-mail]:joren485/sample-finder.git
$ cd sample-finder
$ uv sync
$ source .venv/bin/activate
$ sample-finder --help

Config

You need a config file with API tokens for each supported source. You can find an example in example.confg.yaml.

Usage

$ sample-finder --help
 Usage: sample-finder [OPTIONS]

 Download hashes from multiple sources.

╭─ Options ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ *  --input               -i      FILE       [default: None] [required]                                                                                                                                         │
│ *  --output              -o      DIRECTORY  [default: None] [required]                                                                                                                                         │
│    --config              -c      FILE       [default: config.yaml]                                                                                                                                             │
│    --verbose             -v                                                                                                                                                                                    │
│    --install-completion                     Install completion for the current shell.                                                                                                                          │
│    --show-completion                        Show completion for the current shell, to copy it or customize the installation.                                                                                   │
│    --help                                   Show this message and exit.                                                                                                                                        │
╰────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯