| 1 | 2,737 | 3,104 | dnsbl-client | simple interface to lookup blacklists results |
| 2 | 6,482 | 15,360 | configparser | parses configuration files compatable with Python's ConfigParser |
| 3 | 15,098 | 20,838 | passivedns-client | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 4 | 30,090 | 53,294 | structformatter | Extends Structs, Hashes, and Arrays with .to_json, .to_xml, and .to_s. This handles ne... |
| 5 | 34,690 | 31,112 | snort-rule | Parses and generates Snort rules similar to PERL's Snort::Rule |
| 6 | 47,834 | 44,655 | passivetotal | PassiveTotal offers an extensive API for users of the platform that maps most major act... |
| 7 | 55,987 | 66,059 | em-ftpd-memory | This implements a simple in-memory storage of files for use with em-ftpd |
| 8 | 60,149 | 47,265 | wepawet | Wepawet is a service for detecting and analyzing web-based malware. It currently handle... |
| 9 | 61,172 | 50,095 | eventmachine-email_server | Simple POP3 and SMTP implementation in EventMachine for use in the Rubot framework |
| 10 | 65,535 | 98,240 | flowtag | presents the user with a GUI interface to visualize and explore flows found from a give... |
| 11 | 66,039 | 71,921 | passive-dns | This provides interfaces to various passive DNS databases to do the query and to normal... |
| 12 | 66,993 | 66,059 | arbor-atlas | The ATLAS portal today is a public resource that delivers a sub-set of the intelligence... |
| 13 | 68,660 | 98,240 | shadowserver | The Shadowserver Foundation is an all volunteer watchdog group of security professional... |
| 14 | 68,795 | 98,240 | cif-client | CIF is a cyber threat intelligence management system. CIF allows you to combine known m... |
| 15 | 86,195 | 78,816 | threatexpert | rovides a simple API to query ThreatExpert by malware name (to receive a list of matchi... |
| 16 | 94,019 | 50,095 | yara-normalize | Provides normalization and hashing utilities for Yara rule comparisons. |
| 17 | 104,462 | 78,816 | offensivecomputing | Rubygem for interacting with OffensiveComputing.net, a malware sharing community. This... |
| 18 | 111,853 | 78,816 | eventmachine-dnsbl | For use in the Rubot Emulation Framework, I needed an EventMachine-based implementation... |
| 19 | 113,456 | 131,109 | eventmachine-irc-server | For use in the Rubot Emulation Framework, this simple IRC server allows test bots to co... |
| 20 | 131,670 | 112,619 | tk-double-slider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 21 | 134,377 | 131,109 | tk-parallel-coordinates | This provides a rich Tk widget for displaying data across multiple axis with scaling. |
| 22 | 134,605 | 131,109 | backscatterio | [This is the Backscatter.io API.](https://backscatter.io/developers) |
| 23 | 138,998 | 131,109 | tk-parallelcoordinates | This provides a rich Tk widget for displaying data across multiple axes with scaling. |
| 24 | 139,098 | 87,602 | ratelimit-bucketbased | Simple rate limiting gem useful for regulating the speed at which service is provided, ... |
| 25 | 140,048 | 131,109 | tk-doubleslider | This provides an advanced, double-headed slider widget that allows selection of a range... |
| 26 | 141,278 | 131,109 | teamcymru | Team Cymru provides a variety of services for network and security operators. This Rub... |
| 27 | 153,879 | 157,203 | eventmachine-email_server-maildir | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 28 | 154,605 | 157,203 | eventmachine-email_server-sqlite3 | This provides the implementation of a user and email store for an EventMachine-based SM... |
| 29 | 157,331 | 157,203 | opml_janitor | This gem provides a tool for cleaning up OPML feeds. |