Skip to main content
GET
/
service
/
v2
/
victims
/
{log_id}
/
files
/
{file_id}
Get Victim File Content
curl --request GET \
  --url https://oathnet.org/api/service/v2/victims/{log_id}/files/{file_id} \
  --header 'x-api-key: <api-key>'
"<string>"

​
Response Format

SDK Note: This endpoint returns raw text content, not JSON. Handle as plain text response. SDKs handle this automatically in v1.0.3+.

​
Overview

Get the content of a specific file from a victim log. The log_id and file_id are obtained from the Victim Manifest endpoint.

​
Example Response

The response is plain text (not JSON): 
URL: https://discord.com/login
Username: victim_user@email.com
Password: secretpassword123

URL: https://gmail.com
Username: victim_user@email.com
Password: anotherpassword456

​
Usage Example

import requests

API_KEY = "your_api_key"
log_id = "abc123def456"
file_id = "f1"  # From victim_tree in manifest

# Get file content (returns raw text)
response = requests.get(
    f"https://oathnet.org/api/service/v2/victims/{log_id}/files/{file_id}",
    headers={"x-api-key": API_KEY}
)

# Use .text not .json() - this is plain text!
content = response.text
print(content)

​
SDK Examples

# Using oathnet SDK v1.0.3+
from oathnet import OathNetClient

client = OathNetClient(api_key="your_api_key")

# SDK handles raw text automatically
response = client.victims.get_file(log_id="abc123", file_id="f1")
print(response.data.content)

Authorizations

​
x-api-key
string
header
required

API key for authentication (lowercase header name)

Path Parameters

​
log_id
string
required
​
file_id
string
required

Response

Raw file content as plain text

Raw file content