| 1 | 11,313 | 9,187 | mihari | A query aggregator for OSINT based threat hunting |
| 2 | 17,042 | 14,068 | miteru | A phishing kit collector for scavengers |
| 3 | 17,962 | 39,631 | securitytrails | SecurityTrails API wrapper for Ruby |
| 4 | 33,566 | 35,889 | urlscan | Ruby API client for urlscan.io |
| 5 | 35,120 | 37,705 | hachi | A dead simple TheHive API wrapper. |
| 6 | 45,672 | 51,469 | onyphe | ONYPHE API wrapper for Ruby |
| 7 | 48,910 | 56,201 | pulsedive | Ruby library for Pulsedive API |
| 8 | 52,095 | 47,710 | virustotalx | Yet another VirusTotal API wrapper for Ruby |
| 9 | 52,496 | 41,962 | rogue_one | A rogue DNS detector |
| 10 | 55,092 | 41,962 | fushin | A malicious blog posts checker |
| 11 | 55,457 | 56,201 | censu | Ruby API client for the Censys Internet search engine. |
| 12 | 55,987 | 68,912 | misp | A dead simple MISP API wrapper for Ruby |
| 13 | 58,124 | 78,305 | crtsh-rb | crt.sh API wrapper for Ruby |
| 14 | 61,849 | 44,533 | tansaku | Yet another dirbuster tool |
| 15 | 63,194 | 91,305 | shodanx | Yet another Shodan API wrapper for Ruby |
| 16 | 63,580 | 56,201 | apullo | A scanner for basic network fingerprints |
| 17 | 63,641 | 47,710 | kokki | Convert a country name / code & IP address to an emoji flag |
| 18 | 71,437 | 91,305 | passivetotalx | PassiveTotal API wrapper for Ruby |
| 19 | 71,723 | 91,305 | zoomeye-rb | ZoomEye API wrapper for Ruby |
| 20 | 77,825 | 109,611 | censysx | Censys Search v2 API wrapper for Ruby |
| 21 | 78,963 | 138,533 | dnpedia | DNPedia doamin search API wrapper for Ruby |
| 22 | 79,719 | 91,305 | passive_circl | CIRCL Passive DNS/SSL API wrapper for Ruby |
| 23 | 79,936 | 56,201 | simple_whatweb | Simplified ver. of WhatWeb. |
| 24 | 80,115 | 109,611 | binaryedge | BinaryEdge API wrapper for Ruby |
| 25 | 80,190 | 56,201 | rangescan | A CLI tool to scan websites on a specific IP range |
| 26 | 81,343 | 138,533 | dnstwister | dnstwister API wrapper for Ruby |
| 27 | 83,579 | 61,658 | osakana | A Swiss army knife for the phishing research. |
| 28 | 83,775 | 109,611 | spysex | Spyse API wrapper for Ruby |
| 29 | 88,083 | 68,912 | ukemi | A CLI tool for querying passive DNS services |
| 30 | 88,184 | 68,912 | doh_client | DNS over HTTPS(DoH) client for Ruby |
| 31 | 90,258 | 68,912 | ryo | Ryo is a yet another website recon tool. |
| 32 | 91,280 | 109,611 | greynoise | GreyNoise API wrapper for Ruby |
| 33 | 109,256 | 109,611 | the-noises | ザ・ノイジーズのポッドキャスト用Rubyクライアント |
| 34 | 111,312 | 91,305 | urlhaus_monitor | A monitoring tool for URLhaus feeds. |
| 35 | 114,989 | 91,305 | doorknock | Phishing kit admin panel tracker. |
| 36 | 126,719 | 190,739 | ahiru | Yet another Ruby gem for DuckDuckGo search |
| 37 | 135,484 | 91,305 | dnsdb | DNSDB API wrapper for Ruby |
| 38 | 138,653 | 109,611 | robtex | Ruby client for the Robtex API |
| 39 | 162,574 | 138,533 | daino | A dead simple Cortex API wrapper for Ruby. |
| 40 | 164,270 | 138,533 | rb-mynumber | Check given string/number is a MyNumber or not |
| 41 | 165,441 | 138,533 | urlhaus | URLhaus query API wrapper for Ruby |
| 42 | 167,850 | 109,611 | koji | A development/staging environment detector. |
| 43 | 170,333 | 138,533 | rb-urlvoid | Yet another ruby gem for URLVoid API |
| 44 | 171,333 | 138,533 | hybridanalysisx | Yet another Hybrid Analysis API wrapper for Ruby |
| 45 | 183,228 | 138,533 | rspec-httpbin | An httpbin like Rack module for Rspec |