Back to Methodologies

Gather assets through API

#methodology#recon#api

Commands

https://www.virustotal.com/vtapi/v2/domain/report?apikey=<api_key>&domain=<DOMAIN>
VirusTotal API - Get domain report including subdomains and IPs
curl -s "https://www.virustotal.com/vtapi/v2/domain/report?domain=<DOMAIN>&apikey=<api_key>" | jq -r '.. | .ip_address? // empty' | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}'
Extract IP addresses from VirusTotal domain report

Tips & Best Practices

Always replace <api_key> with your actual API key

Replace <DOMAIN> with the target domain

Consider rate limits when making API requests

Some APIs require authentication or paid subscriptions

Use jq for better JSON parsing and filtering

Combine multiple API results for better coverage

Document all findings from each API source

Verify findings manually before reporting