import json, os, sys, urllib.request, urllib.error API = "https://yaraify-api.abuse.ch/api/v1/" def _cfg(): return json.loads(os.environ.get("INTEGRATION_SECRETS", "{}")) def _inputs(): return json.loads(os.environ.get("INTEGRATION_INPUTS", "{}")) def query(cfg, body): data = json.dumps(body).encode("utf-8") headers = { "Auth-Key": str(cfg.get("auth_key", "")), "Content-Type": "application/json", "Accept": "application/json", } req = urllib.request.Request(API, data=data, headers=headers, method="POST") with urllib.request.urlopen(req, timeout=60) as r: raw = r.read() return json.loads(raw) if raw else {} def _run(fn): try: print(json.dumps(fn(_cfg(), _inputs()))) except urllib.error.HTTPError as e: print(json.dumps({"error": "HTTP " + str(e.code), "detail": e.read().decode("utf-8", "replace")})) sys.exit(1) except Exception as e: print(json.dumps({"error": str(e)})) sys.exit(1) def main(cfg, inputs): hash_value = inputs.get("hash") if not hash_value: raise Exception("hash is required") return query(cfg, {"query": "lookup_hash", "search_term": hash_value}) _run(main)