Sicherwerk
hash reputation
Queries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict. No endpoint for sample retrieval is called and no binary is downloaded. A missing record means unknown to these sources, not proven benign. VirusTotal is deliberately not used because its public terms do not permit redistribution in this paid product.
POST https://sicher.halowerk.com/v1/hash-reputationEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| hash | string | Ja | MD5, SHA-1 or SHA-256 digest. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"hash"
],
"additionalProperties": false,
"properties": {
"hash": {
"type": "string",
"minLength": 32,
"maxLength": 64,
"pattern": "^[A-Fa-f0-9]+$",
"description": "MD5, SHA-1 or SHA-256 digest."
}
}
}Veröffentlichtes Eingabebeispiel
{
"hash": "094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3d78d"
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://sicher.halowerk.com/v1/hash-reputation/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,002 USDC
jwt verify
POSThttps://sicher.halowerk.com/v1/jwt-verifyDecodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: