Package: riskiq
Python client for RiskIQ API servicesriskiqprovides a Python client library implementation into RiskIQ API
services. The library currently provides support for the following services:Passive DNS queriesBlacklist URL searchBlacklist Incident URL searchZList downloadCrawlerLanding PagesubmissionCommand-line scriptsThe following command line scripts are installed with the library:riq-config: utility to set or query API configuration options for the
library (API token and private key).riq-dns: client to issue queries to the RiskIQ Passive DNS database service.riq-blacklist: client to issue queries for domains and URLs to identify
listings in the RiskIQ blacklist.riq-zlist: query the zlist for entries within a time rangeriq-landingpage: get and submit new landing pagesriq-binary: list and download files from the binary feedSee theUsagesection for more information.InstallationFrom the downloaded source distribution:$ python setup.py installOr from PyPI:$ pip install riskiqThe package depends on the PythonRequestslibrary.
If Requests is not installed, it will be installed as a dependency.SetupFirst-time setup requires configuring your API token and private key for authentication:$ riq-config setup <API_TOKEN> <API_PRIVATE_KEY>At any time, the current API configuration parameters can be queried using the same utility:$ riq-config showConfiguration parameters are stored in$HOME/.config/riskiq/api_config.json.UsageEvery command-line script has several sub-commands that may be passed to it. The
commands usage may be described with the-h/--helpoption.For example:$ riq-blacklist -h
usage: riq-blacklist [-h] {lookup,incident,incidentlist,list,malware} ...

positional arguments:
  {lookup,incident,incidentlist,list,malware}
    lookup              Query blacklist on URL
    incident            Query blacklist incident on URL
    incidentlist        query blacklist incidents within timeframe
    list                query blacklisted resources
    malware             Query for all discovered malware resources generated
                        within a particular period.

optional arguments:
  -h, --help            show this help message and exitEvery sub-command has further help options::$ riq-blacklist lookup -h
usage: riq-blacklist lookup [-h] [-l] [-j] urls [urls ...]

positional arguments:
  urls

optional arguments:
  -h, --help     show this help message and exit
  -l, --oneline  Output one line per entry
  -j, --json     Output as JSONAll commands will have the-j/--jsonoption to return raw responses in JSON
format, which often contain more information than present in the default,
human readable format.Version HistoryVersions before 0.2.7 have been mostly base implementation and bug fixes.
We do not recommend using anything less than 0.2.7.0.4.10:Added support for whois history lookups in API.0.4.9:Added support for bulk blacklist lookups in API.0.4.8:Added custom jinja2 template option to CLI render script (–template/-T)
Fixed whitespace rendering when incidents are empty0.4.7:Hotfix for rendering bug0.4.6:Fixed multiple blacklist templates
Fixed verbose flag for riq-blacklist submodules0.4.5:Fixed bugs in riskiq.cli.blacklist scripts0.4.4:Refactored riskiq.cli.blacklist scripts0.4.3:Fixed issue where Python 2.6 sys.version_info is a tuple, not namedtuple.0.4.2:Fixed config bug0.4.1:Disable httplib if in Python 3+0.4.0:Working on Python 3 compatibility0.3.2:Updatedriq-dnsoutput formats. Default output format is now a
shortened one-line format per record. A more verbose one-line format
is available with the-v/--verboseoption. The previous text-based
“human-readable” format is available using the-T/--textoption.0.2.7:Fixed template bug inriq-landingpagesubmit0.2.6:Fix landingpage submissions to allow md5, project, keyword, fields0.2.5:Added binary download options –output and –output-dir
8f540b0 List and download suspicious binaries via CLI
fix MANIFEST.in installation bug0.2.3:Documentation changes0.2.1:Added documentation<= 0.2.0:Most implementation of CLI tools and client API