| 1 | 2,759 | 2,940 | dnsbl-client | simple interface to lookup blacklists results |
| 2 | 6,528 | 17,124 | configparser | parses configuration files compatable with Python's ConfigParser |
| 3 | 15,152 | 21,948 | passivedns-client | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 4 | 30,022 | 39,861 | structformatter | Extends Structs, Hashes, and Arrays with .to_json, .to_xml, and .to_s. This handles ne... |
| 5 | 34,567 | 51,354 | snort-rule | Parses and generates Snort rules similar to PERL's Snort::Rule |
| 6 | 47,936 | 60,119 | passivetotal | PassiveTotal offers an extensive API for users of the platform that maps most major act... |
| 7 | 56,011 | 44,821 | em-ftpd-memory | This implements a simple in-memory storage of files for use with em-ftpd |
| 8 | 60,239 | 60,119 | wepawet | Wepawet is a service for detecting and analyzing web-based malware. It currently handle... |
| 9 | 60,970 | 39,861 | eventmachine-email_server | Simple POP3 and SMTP implementation in EventMachine for use in the Rubot framework |
| 10 | 65,750 | 95,897 | flowtag | presents the user with a GUI interface to visualize and explore flows found from a give... |
| 11 | 66,262 | 95,897 | passive-dns | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 12 | 67,237 | 129,552 | arbor-atlas | The ATLAS portal today is a public resource that delivers a sub-set of the intelligence... |
| 13 | 68,917 | 73,939 | shadowserver | The Shadowserver Foundation is an all volunteer watchdog group of security professional... |
| 14 | 69,001 | 129,552 | cif-client | CIF is a cyber threat intelligence management system. CIF allows you to combine known m... |
| 15 | 86,468 | 73,939 | threatexpert | rovides a simple API to query ThreatExpert by malware name (to receive a list of matchi... |
| 16 | 93,841 | 73,939 | yara-normalize | Provides normalization and hashing utilities for Yara rule comparisons. |
| 17 | 104,712 | 129,552 | offensivecomputing | Rubygem for interacting with OffensiveComputing.net, a malware sharing community. This... |
| 18 | 111,818 | 95,897 | eventmachine-dnsbl | For use in the Rubot Emulation Framework, I needed an EventMachine-based implementation... |
| 19 | 113,643 | 95,897 | eventmachine-irc-server | For use in the Rubot Emulation Framework, this simple IRC server allows test bots to co... |
| 20 | 131,928 | 129,552 | tk-double-slider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 21 | 134,005 | 60,119 | backscatterio | [This is the Backscatter.io API.](https://backscatter.io/developers) |
| 22 | 134,680 | 129,552 | tk-parallel-coordinates | This provides a rich Tk widget for displaying data across multiple axis with scaling. |
| 23 | 138,866 | 73,939 | tk-parallelcoordinates | This provides a rich Tk widget for displaying data across multiple axes with scaling. |
| 24 | 138,899 | 95,897 | ratelimit-bucketbased | Simple rate limiting gem useful for regulating the speed at which service is provided, ... |
| 25 | 139,939 | 95,897 | tk-doubleslider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 26 | 141,583 | 129,552 | teamcymru | Team Cymru provides a variety of services for network and security operators. This Rub... |
| 27 | 153,336 | 73,939 | eventmachine-email_server-maildir | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 28 | 154,713 | 129,552 | eventmachine-email_server-sqlite3 | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 29 | 157,660 | 129,552 | opml_janitor | This gem provides a tool for cleaning up OPML feeds. |