| 1 | 2,857 | 7,242 | dnsbl-client | simple interface to lookup blacklists results |
| 2 | 6,977 | 9,585 | configparser | parses configuration files compatable with Python's ConfigParser |
| 3 | 15,704 | 19,335 | passivedns-client | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 4 | 29,837 | 20,142 | structformatter | Extends Structs, Hashes, and Arrays with .to_json, .to_xml, and .to_s. This handles ne... |
| 5 | 34,333 | 21,074 | snort-rule | Parses and generates Snort rules similar to PERL's Snort::Rule |
| 6 | 48,974 | 20,608 | passivetotal | PassiveTotal offers an extensive API for users of the platform that maps most major act... |
| 7 | 57,021 | 60,205 | em-ftpd-memory | This implements a simple in-memory storage of files for use with em-ftpd |
| 8 | 61,564 | 60,205 | wepawet | Wepawet is a service for detecting and analyzing web-based malware. It currently handle... |
| 9 | 61,781 | 50,800 | eventmachine-email_server | Simple POP3 and SMTP implementation in EventMachine for use in the Rubot framework |
| 10 | 67,382 | 75,382 | flowtag | presents the user with a GUI interface to visualize and explore flows found from a give... |
| 11 | 67,821 | 30,840 | passive-dns | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 12 | 68,979 | 154,925 | arbor-atlas | The ATLAS portal today is a public resource that delivers a sub-set of the intelligence... |
| 13 | 70,382 | 29,087 | shadowserver | The Shadowserver Foundation is an all volunteer watchdog group of security professional... |
| 14 | 70,569 | 154,925 | cif-client | CIF is a cyber threat intelligence management system. CIF allows you to combine known m... |
| 15 | 88,066 | 75,382 | threatexpert | rovides a simple API to query ThreatExpert by malware name (to receive a list of matchi... |
| 16 | 93,096 | 75,382 | yara-normalize | Provides normalization and hashing utilities for Yara rule comparisons. |
| 17 | 106,541 | 39,648 | offensivecomputing | Rubygem for interacting with OffensiveComputing.net, a malware sharing community. This... |
| 18 | 113,284 | 154,925 | eventmachine-dnsbl | For use in the Rubot Emulation Framework, I needed an EventMachine-based implementation... |
| 19 | 115,165 | 50,800 | eventmachine-irc-server | For use in the Rubot Emulation Framework, this simple IRC server allows test bots to co... |
| 20 | 134,144 | 102,761 | backscatterio | [This is the Backscatter.io API.](https://backscatter.io/developers) |
| 21 | 134,811 | 102,761 | tk-double-slider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 22 | 137,456 | 102,761 | tk-parallel-coordinates | This provides a rich Tk widget for displaying data across multiple axis with scaling. |
| 23 | 141,309 | 75,382 | ratelimit-bucketbased | Simple rate limiting gem useful for regulating the speed at which service is provided, ... |
| 24 | 141,409 | 154,925 | tk-parallelcoordinates | This provides a rich Tk widget for displaying data across multiple axes with scaling. |
| 25 | 142,575 | 154,925 | tk-doubleslider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 26 | 144,204 | 102,761 | teamcymru | Team Cymru provides a variety of services for network and security operators. This Rub... |
| 27 | 154,865 | 154,925 | eventmachine-email_server-maildir | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 28 | 156,234 | 75,382 | eventmachine-email_server-sqlite3 | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 29 | 159,715 | 60,205 | opml_janitor | This gem provides a tool for cleaning up OPML feeds. |