| 1 | 2,733 | 3,888 | dnsbl-client | simple interface to lookup blacklists results | 
        | 2 | 6,457 | 12,522 | configparser | parses configuration files compatable with Python's ConfigParser | 
        | 3 | 15,072 | 19,104 | passivedns-client | This provides interfaces to various passive DNS databases to do the query and to normal... | 
        | 4 | 30,164 | 19,104 | structformatter | Extends Structs, Hashes, and Arrays with .to_json, .to_xml, and .to_s.  This handles ne... | 
        | 5 | 34,718 | 30,108 | snort-rule | Parses and generates Snort rules similar to PERL's Snort::Rule | 
        | 6 | 47,739 | 77,922 | passivetotal | PassiveTotal offers an extensive API for users of the platform that maps most major act... | 
        | 7 | 55,924 | 77,922 | em-ftpd-memory | This implements a simple in-memory storage of files for use with em-ftpd | 
        | 8 | 60,024 | 113,854 | wepawet | Wepawet is a service for detecting and analyzing web-based malware. It currently handle... | 
        | 9 | 61,211 | 77,922 | eventmachine-email_server | Simple POP3 and SMTP implementation in EventMachine for use in the Rubot framework | 
        | 10 | 65,381 | 113,854 | flowtag | presents the user with a GUI interface to visualize and explore flows found from a give... | 
        | 11 | 65,902 | 77,922 | passive-dns | This provides interfaces to various passive DNS databases to do the query and to normal... | 
        | 12 | 66,868 | 184,023 | arbor-atlas | The ATLAS portal today is a public resource that delivers a sub-set of the intelligence... | 
        | 13 | 68,514 | 113,854 | shadowserver | The Shadowserver Foundation is an all volunteer watchdog group of security professional... | 
        | 14 | 68,657 | 43,003 | cif-client | CIF is a cyber threat intelligence management system. CIF allows you to combine known m... | 
        | 15 | 86,029 | 77,922 | threatexpert | rovides a simple API to query ThreatExpert by malware name (to receive a list of matchi... | 
        | 16 | 94,126 | 22,754 | yara-normalize | Provides normalization and hashing utilities for Yara rule comparisons. | 
        | 17 | 104,332 | 113,854 | offensivecomputing | Rubygem for interacting with OffensiveComputing.net, a malware sharing community.  This... | 
        | 18 | 111,810 | 113,854 | eventmachine-dnsbl | For use in the Rubot Emulation Framework, I needed an EventMachine-based implementation... | 
        | 19 | 113,305 | 49,628 | eventmachine-irc-server | For use in the Rubot Emulation Framework, this simple IRC server allows test bots to co... | 
        | 20 | 131,446 | 77,922 | tk-double-slider | This provides an advanced, double-headed slider widget that allows selection of a range... | 
        | 21 | 134,109 | 77,922 | tk-parallel-coordinates | This provides a rich Tk widget for displaying data across multiple axis with scaling. | 
        | 22 | 134,787 | 77,922 | backscatterio | [This is the Backscatter.io API.](https://backscatter.io/developers) | 
        | 23 | 138,836 | 77,922 | tk-parallelcoordinates | This provides a rich Tk widget for displaying data across multiple axes with scaling. | 
        | 24 | 139,063 | 113,854 | ratelimit-bucketbased | Simple rate limiting gem useful for regulating the speed at which service is provided, ... | 
        | 25 | 139,750 | 113,854 | tk-doubleslider | This provides an advanced, double-headed slider widget that allows selection of a range... | 
        | 26 | 141,024 | 77,922 | teamcymru | Team Cymru provides a variety of services for network and security operators.  This Rub... | 
        | 27 | 153,988 | 77,922 | eventmachine-email_server-maildir | This provides the implementation of a user and email store for an EventMachine-based SM... | 
        | 28 | 154,439 | 113,854 | eventmachine-email_server-sqlite3 | This provides the implementation of a user and email store for an EventMachine-based SM... | 
        | 29 | 157,139 | 113,854 | opml_janitor | This gem provides a tool for cleaning up OPML feeds. |