VirusTotal/vt-cli

Health v2 · maintenance only

Adoption not part of the score

1464 stars · 147 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The official VirusTotal command-line interface, written in Go, that lets users interact with VirusTotal's API from the terminal. It supports retrieving file, URL, domain, and IP reports, searching with VirusTotal Intelligence syntax, downloading files, and managing YARA hunting rules and Retrohunt jobs.

Use cases

• look up a file hash on virustotal from the command line
• search virustotal intelligence queries from terminal
• download malware samples via virustotal api
• manage yara livehunt rules from cli
• check if a url or domain is flagged as malicious
• run retrohunt jobs and fetch matches

When to choose

• you want scriptable access to VirusTotal data without writing API code
• you need to automate threat intelligence lookups in shell pipelines
• you manage YARA hunting rulesets or retrohunt jobs regularly

When to avoid

• you only need occasional web-based lookups without an API key
• you need premium features like Intelligence search or file downloads with only a free API key
• you need a GUI-based malware analysis workflow

Facets

cli-tool · maturity active

cli http-client search-engine security security developer-tools apis windows go cli virustotal threat-intelligence malware-analysis yara api-client command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="VirusTotal/vt-cli")