mirror of https://github.com/M66B/FairEmail.git
parent
73f7b4a9a4
commit
dbc8dc5266
@ -1,150 +0,0 @@
|
||||
package eu.faircode.email;
|
||||
|
||||
/*
|
||||
This file is part of FairEmail.
|
||||
|
||||
FairEmail is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
FairEmail is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with FairEmail. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
Copyright 2018-2022 by Marcel Bokhorst (M66B)
|
||||
*/
|
||||
|
||||
import android.content.Context;
|
||||
import android.content.SharedPreferences;
|
||||
import android.net.Uri;
|
||||
import android.os.Bundle;
|
||||
import android.text.TextUtils;
|
||||
|
||||
import androidx.fragment.app.FragmentManager;
|
||||
import androidx.lifecycle.LifecycleOwner;
|
||||
import androidx.preference.PreferenceManager;
|
||||
|
||||
import org.json.JSONArray;
|
||||
import org.json.JSONObject;
|
||||
|
||||
import java.io.FileInputStream;
|
||||
import java.io.FileNotFoundException;
|
||||
import java.io.InputStream;
|
||||
import java.net.URL;
|
||||
|
||||
import javax.net.ssl.HttpsURLConnection;
|
||||
|
||||
public class Check {
|
||||
static final String URI_VT_PRIVACY = "https://support.virustotal.com/hc/en-us/articles/115002168385-Privacy-Policy";
|
||||
private static final int VT_TIMEOUT = 20; // seconds
|
||||
private static final String URI_VT_ENDPOINT = "https://www.virustotal.com/";
|
||||
|
||||
static void virus(Context context, LifecycleOwner owner, FragmentManager fm, long id) {
|
||||
Bundle args = new Bundle();
|
||||
args.putLong("id", id);
|
||||
|
||||
new SimpleTask<String>() {
|
||||
@Override
|
||||
protected String onExecute(Context context, Bundle args) throws Throwable {
|
||||
long id = args.getLong("id");
|
||||
|
||||
DB db = DB.getInstance(context);
|
||||
EntityAttachment attachment = db.attachment().getAttachment(id);
|
||||
if (attachment == null)
|
||||
return null;
|
||||
|
||||
String hash;
|
||||
try (InputStream is = new FileInputStream(attachment.getFile(context))) {
|
||||
hash = Helper.getHash(is, "SHA-256");
|
||||
}
|
||||
|
||||
SharedPreferences prefs = PreferenceManager.getDefaultSharedPreferences(context);
|
||||
String apikey = prefs.getString("vt_apikey", null);
|
||||
|
||||
if (!TextUtils.isEmpty(apikey)) {
|
||||
URL url = new URL(URI_VT_ENDPOINT + "api/v3/files/" + hash);
|
||||
HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
|
||||
connection.setRequestMethod("GET");
|
||||
connection.setReadTimeout(VT_TIMEOUT * 1000);
|
||||
connection.setConnectTimeout(VT_TIMEOUT * 1000);
|
||||
ConnectionHelper.setUserAgent(context, connection);
|
||||
connection.setRequestProperty("x-apikey", apikey);
|
||||
connection.connect();
|
||||
|
||||
try {
|
||||
int status = connection.getResponseCode();
|
||||
if (status != HttpsURLConnection.HTTP_OK && status != HttpsURLConnection.HTTP_NOT_FOUND) {
|
||||
String error = "Error " + status + ": " + connection.getResponseMessage();
|
||||
try {
|
||||
InputStream is = connection.getErrorStream();
|
||||
if (is != null)
|
||||
error += "\n" + Helper.readStream(is);
|
||||
} catch (Throwable ex) {
|
||||
Log.w(ex);
|
||||
}
|
||||
throw new FileNotFoundException(error);
|
||||
}
|
||||
|
||||
if (status == HttpsURLConnection.HTTP_OK) {
|
||||
String response = Helper.readStream(connection.getInputStream());
|
||||
Log.i("VT response=" + response);
|
||||
|
||||
// https://developers.virustotal.com/reference/files
|
||||
// Example: https://gist.github.com/M66B/4ea95fdb93fb10bf4047761fcc9ec21a
|
||||
JSONObject jroot = new JSONObject(response);
|
||||
JSONObject jdata = jroot.getJSONObject("data");
|
||||
JSONObject jattributes = jdata.getJSONObject("attributes");
|
||||
|
||||
JSONObject jclassification = jattributes.getJSONObject("popular_threat_classification");
|
||||
String label = jclassification.getString("suggested_threat_label");
|
||||
|
||||
int count = 0;
|
||||
int malicious = 0;
|
||||
JSONObject jlast_analysis_results = jattributes.getJSONObject("last_analysis_results");
|
||||
JSONArray jnames = jlast_analysis_results.names();
|
||||
for (int i = 0; i < jnames.length(); i++) {
|
||||
String name = jnames.getString(i);
|
||||
JSONObject jresult = jlast_analysis_results.getJSONObject(name);
|
||||
String category = jresult.getString("category");
|
||||
Log.i("VT " + name + "=" + category);
|
||||
if (!"type-unsupported".equals(category))
|
||||
count++;
|
||||
if ("malicious".equals(category))
|
||||
malicious++;
|
||||
}
|
||||
|
||||
Log.i("VT label=" + label + " " + malicious + "/" + count);
|
||||
|
||||
args.putString("label", label);
|
||||
args.putInt("count", count);
|
||||
args.putInt("malicious", malicious);
|
||||
}
|
||||
} finally {
|
||||
connection.disconnect();
|
||||
}
|
||||
}
|
||||
|
||||
return hash;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected void onExecuted(Bundle args, String hash) {
|
||||
if (hash == null)
|
||||
return;
|
||||
|
||||
Uri uri = Uri.parse(URI_VT_ENDPOINT + "gui/file/" + hash);
|
||||
Helper.view(context, uri, false);
|
||||
}
|
||||
|
||||
@Override
|
||||
protected void onException(Bundle args, Throwable ex) {
|
||||
Log.unexpectedError(fm, ex);
|
||||
}
|
||||
}.execute(context, owner, args, "attachment:scan");
|
||||
}
|
||||
}
|
@ -0,0 +1,126 @@
|
||||
package eu.faircode.email;
|
||||
|
||||
/*
|
||||
This file is part of FairEmail.
|
||||
|
||||
FairEmail is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
FairEmail is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with FairEmail. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
Copyright 2018-2022 by Marcel Bokhorst (M66B)
|
||||
*/
|
||||
|
||||
import android.content.Context;
|
||||
import android.content.SharedPreferences;
|
||||
import android.os.Bundle;
|
||||
import android.text.TextUtils;
|
||||
|
||||
import androidx.preference.PreferenceManager;
|
||||
|
||||
import org.json.JSONArray;
|
||||
import org.json.JSONException;
|
||||
import org.json.JSONObject;
|
||||
|
||||
import java.io.File;
|
||||
import java.io.FileInputStream;
|
||||
import java.io.FileNotFoundException;
|
||||
import java.io.IOException;
|
||||
import java.io.InputStream;
|
||||
import java.net.URL;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
|
||||
import javax.net.ssl.HttpsURLConnection;
|
||||
|
||||
public class VirusTotal {
|
||||
static final String URI_ENDPOINT = "https://www.virustotal.com/";
|
||||
static final String URI_PRIVACY = "https://support.virustotal.com/hc/en-us/articles/115002168385-Privacy-Policy";
|
||||
|
||||
private static final int VT_TIMEOUT = 20; // seconds
|
||||
|
||||
static Bundle scan(Context context, File file) throws NoSuchAlgorithmException, IOException, JSONException {
|
||||
String hash;
|
||||
try (InputStream is = new FileInputStream(file)) {
|
||||
hash = Helper.getHash(is, "SHA-256");
|
||||
}
|
||||
|
||||
Bundle result = new Bundle();
|
||||
result.putString("uri", URI_ENDPOINT + "gui/file/" + hash);
|
||||
|
||||
SharedPreferences prefs = PreferenceManager.getDefaultSharedPreferences(context);
|
||||
String apikey = prefs.getString("vt_apikey", null);
|
||||
if (TextUtils.isEmpty(apikey))
|
||||
return result;
|
||||
|
||||
URL url = new URL(URI_ENDPOINT + "api/v3/files/" + hash);
|
||||
HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
|
||||
connection.setRequestMethod("GET");
|
||||
connection.setReadTimeout(VT_TIMEOUT * 1000);
|
||||
connection.setConnectTimeout(VT_TIMEOUT * 1000);
|
||||
ConnectionHelper.setUserAgent(context, connection);
|
||||
connection.setRequestProperty("x-apikey", apikey);
|
||||
connection.connect();
|
||||
|
||||
try {
|
||||
int status = connection.getResponseCode();
|
||||
if (status != HttpsURLConnection.HTTP_OK && status != HttpsURLConnection.HTTP_NOT_FOUND) {
|
||||
String error = "Error " + status + ": " + connection.getResponseMessage();
|
||||
try {
|
||||
InputStream is = connection.getErrorStream();
|
||||
if (is != null)
|
||||
error += "\n" + Helper.readStream(is);
|
||||
} catch (Throwable ex) {
|
||||
Log.w(ex);
|
||||
}
|
||||
throw new FileNotFoundException(error);
|
||||
}
|
||||
|
||||
if (status == HttpsURLConnection.HTTP_OK) {
|
||||
String response = Helper.readStream(connection.getInputStream());
|
||||
Log.i("VT response=" + response);
|
||||
|
||||
// https://developers.virustotal.com/reference/files
|
||||
// Example: https://gist.github.com/M66B/4ea95fdb93fb10bf4047761fcc9ec21a
|
||||
JSONObject jroot = new JSONObject(response);
|
||||
JSONObject jdata = jroot.getJSONObject("data");
|
||||
JSONObject jattributes = jdata.getJSONObject("attributes");
|
||||
|
||||
JSONObject jclassification = jattributes.getJSONObject("popular_threat_classification");
|
||||
String label = jclassification.getString("suggested_threat_label");
|
||||
|
||||
int count = 0;
|
||||
int malicious = 0;
|
||||
JSONObject janalysis = jattributes.getJSONObject("last_analysis_results");
|
||||
JSONArray jnames = janalysis.names();
|
||||
for (int i = 0; i < jnames.length(); i++) {
|
||||
String name = jnames.getString(i);
|
||||
JSONObject jresult = janalysis.getJSONObject(name);
|
||||
String category = jresult.getString("category");
|
||||
Log.i("VT " + name + "=" + category);
|
||||
if (!"type-unsupported".equals(category))
|
||||
count++;
|
||||
if ("malicious".equals(category))
|
||||
malicious++;
|
||||
}
|
||||
|
||||
Log.i("VT label=" + label + " " + malicious + "/" + count);
|
||||
|
||||
result.putString("label", label);
|
||||
result.putInt("count", count);
|
||||
result.putInt("malicious", malicious);
|
||||
}
|
||||
} finally {
|
||||
connection.disconnect();
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
}
|
Loading…
Reference in new issue