ViTee is tool based in Python that allows you to leverage Virus Total's API

ViTee allows you to provide a single source file with your IOCs, it automatically extracts and parses the following types of IOCs

• URLs
• IPs
• Domains
• Hashes

It then checks each unique IOC against VirusTotal and generates a report with unique tabs per IOC type.

I recommend creating a Virtual Environment (venv) to avoid changing your base Python's setup. Instructions here

You can install the required modules once the venv is ready, and you have activated it.

go to the root of the project and run

$ pip install -r requirements.txt

With the required modules installed you can now use the script to generate your reports.

python vitee.py -i source.txt -o dest -m 1 -a <YOUR API>

Once you run the command you will see the following window, which details the IOCs to be queried after removing duplicates.

Output Example

CLI

REPORT

1. Domains

2. IP Addresses

3. Hashes

You can save your API in the config by running

python vitee.py -u YOUR_API_KEY

You can run python vitee.py -h to get the help menu

Required

Optional

Troubleshooting

If you face issues installing the iocextract library on Windows you might need to install C++ 14, this is usually installed with Visual Studio but if you don't want to install the tool you can download and install the required libraries from Visual C++ 2015 Build Tools

Enjoy the tool