[!] Error: Virustotal probably now is blocking our requests

[GDATTACKER-RESEARCHER]

[!] Error: Virustotal probably now is blocking our requests

[DustinTheGreat]

This error isn't new, they just need to rewrite the send_req() function.

[latest-release]

The problem is not with send_req, it seems virus total changed there url from
https://www.virustotal.com/ui/domains/{domain}/subdomains this one leads to this error

error |  
-- | --
code | "BadRequestError"
message | "Don't be evil"

https://www.virustotal.com/gui/domain/{{dommain}}/details this one works

We faced such a problem when we dealt with this tool at Nmmapper
We investigate and the problem is with the url.

Though I would suggest they offer an option of providing api for virustotal

[unaipuelles]

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

[Leoangelo-45]

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

Any solution?

[crahan]

I submitted a quick fix for this issue via #285. The pull request adds a check for a VT_APIKEY environment variable to use for the VirusTotal request. If the API key is missing, it prints an error message and skips the VirusTotal engine.

[Toriqulislamshimanto]

@crahan How did you import api key inside the sublist3r

[crahan]

I use the below code snippet in my .zshrc (or .bashrc) configuration file, which will load the API key from a text file (if it exists) whenever I open a shell. Alternatively you can just run export VT_APIKEY=yourapikey manually before using Sublist3r.

# VirusTotal
if [[ -f "${HOME}/.api_tokens/vt_apikey" ]]; then
    export VT_APIKEY="$(cat ${HOME}/.api_tokens/vt_apikey 2> /dev/null)"
fi

[Toriqulislamshimanto]

@crahan sorry for my dumb request...I am new to this Linux platform... I still couldn't fix my issue...Can you give me step-by-step instructions... Once again please accept my apology !!!

[crahan]

You'll need to first install a copy with my fixes before you'll be able to use the API key solution. Without a patched (and working) copy of Sublist3r it might be a little tricky to set up.

[Toriqulislamshimanto]

@crahan I did change the code as you said...But I get "Error: VirusTotal API key environment variable not found. Skipping" !!!
How do I export the API key inside the sublist3r ?? Thanks for responding by the way

[crahan]

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

[crahan]

Based on that error, I don't think it's running the patched version of the code.

[Toriqulislamshimanto]

@crahan Nah....My bad.........It's is working again.....Thanks for your help brother......I won't forget your kindness !!!

[crahan]

Awesome, happy to hear all is well. Keep in mind though that free VirusTotal accounts have a cap on the number of API requests per minute (I think it's 4, last I checked). So you still might see errors if you query too quickly with Sublist3r.

[thecanadiananonymity]

<script>alert(1)</script>

[shabbadont]

Based on that error, I don't think it's running the patched version of the code.

How do you patch?

[RoninNakomoto]

@crahan @Toriqulislamshimanto @Leoangelo-45 @latest-release @GDATTACKER-RESEARCHER @DustinTheGreat

check my fork. its a fixed bug-free working copy (only runs under python3 if properly installed), also has much faster bruteforcing capabilities using aiodnsbrute (instead of subbrute).
@crahan i used ur PR code as a basis to fix virustotal access problem but also added ability to enter key during runtime and it now catches error codes and messages as returned by VT API.

[Azadn70]

[!] Error: Virustotal probably now is blocking our requests
after input av code

[theteleforce]

For those who still want to use this version, I have added a minimal fix in #327 that doesn't require an API key. This should restore Virustotal checks to working as normal.

[martijorba]

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

what is the actual VirusTotal API key?

[martijorba]

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

it doesn't work, some help?

[firingdove]

terminal window, run the Sublist3r command. That should be all that's required.

Sorry I did that but I am still getting the error. help please.

[DavidFrds]

Hey, worked fine for me.
First of all make sure you update your sublis3r file (/usr/lib/python3/dist-packages/sublist3r.py) with the fix added by crahan > Files changed
Then export your VT_APIKEY with the command export VT_APIKEY=yourAPIkey before starting sublist3r.

To have your personal Virustotal API Key, you can follow this documentation

[lincasaires]

NOT WORKING FOR ME TOO =´[

[firingdove]

NOT WORKING FOR ME TOO =´[
I hope I am not replying late. it worked for me. follow @adves34 instructions. if its not still working please send me a message. I will walk through it with you. thanks

[repra22]

Exporting the API didn't worked for me as well

[proverbian]

For those who still want to use this version, I have added a minimal fix in #327 that doesn't require an API key. This should restore Virustotal checks to working as normal.

Saved my day! Works like a charm! Thank you!

[CHARANPRAVEENKUMAR]

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

how to get our api key?

[DavidFrds]

everything is written here : documentation

[ArsalanAbbassi]

No problem. Right before you run the Sublist3r command run the following:

export VT_APIKEY=yourapikey (replace 'yourapikey' with the actual VirusTotal API key)

After that, in the same terminal window, run the Sublist3r command. That should be all that's required.

sorry for asking dumb question i'm new to linux how can i find my API of virus total

[akramknf]

just create an account and they will give you an api key

[Morgoth04]

Same error here. The first two times worked perfectly but some days after the same error appears: "[!] Error: Virustotal probably now is blocking our requests". Any solution for this problem?

Any solution?

Almost 4 years late, sorry:

1. The url line in the class corresponding to Virustotal (class Virustotal(enumratorBaseThreaded):) of the sublist3er.py program must be corrected (base_url = 'https://www.virustotal.com/api/v3/domains/{domain}/subdomains').
   2)2) Place the apikey that was obtained once registered as a virustotal user in the variable sel.apikey (self.apikey = os.getenv('VT_APIKEY', 'hereenterthealphanumeric code'))
   3)Save the file
2. Overwrite the sublist3r.py file in the Kali Linux path where the one you have was placed
3. Try with the command sudo ./sublist3r.py -d domainchosen.com

[JFOZ1010]

Your second point is not working, por si las moscas.

[nk3015]

This is still an open issue.