Yellow Box Phish
cyber security tool that enables you to fire security commands directly from Discord, Slack, Telegram, iMessage, Signal, and your Web App. Built for red teams, pentesters, and security enthusiasts.
Installation
Step‑by‑step · Python
- 1 Ensure Python 3.8+ is installed
python --version - 2 Clone the repository
git clone https://github.com/IanKulani/yellow_box_phish.git - 3 Navigate into directory
cd phish - 4 Create virtual environment (recommended)
python -m venv venv && source venv/bin/activate - 5 Install dependencies
pip install -r requirements.txt - 6 Configure your platform tokens (Discord, Slack, etc.) in
.env - 7 Launch the tool
python yellow_box_phish.py
Modules
Yellow Box Phish comes with a modular architecture. Each module provides a set of commands for different security tasks.
Use /help in any channel to list all commands for the active module.
Multi‑Platform Commands
Yellow Box Phish listens on all configured platforms simultaneously. Type your command and the tool executes it in the background, returning results to the same channel.
/scan domain.com/whois 8.8.8.8/dork site:gov/hash md5:.../subdomain target.comWeb Application
Yellow Box Phish includes a lightweight web dashboard. After installation, you can access the command interface directly from your browser. The web app supports real‑time logging and module switching.
The web UI is fully responsive and works on mobile, tablet, and desktop.
live demo (mock)