YellowBoxPhish
security commands · everywhere

Yellow Box Phish

cyber security tool that enables you to fire security commands directly from Discord, Slack, Telegram, iMessage, Signal, and your Web App. Built for red teams, pentesters, and security enthusiasts.

Discord Slack Telegram iMessage Signal Web App

Installation

Step‑by‑step · Python

  1. 1 Ensure Python 3.8+ is installed python --version
  2. 2 Clone the repository
    git clone https://github.com/IanKulani/yellow_box_phish.git
  3. 3 Navigate into directory
    cd phish
  4. 4 Create virtual environment (recommended)
    python -m venv venv && source venv/bin/activate
  5. 5 Install dependencies
    pip install -r requirements.txt
  6. 6 Configure your platform tokens (Discord, Slack, etc.) in .env
  7. 7 Launch the tool
    python yellow_box_phish.py
After installation, access the web interface at http://localhost:5000 or use your preferred messenger.

Modules

Yellow Box Phish comes with a modular architecture. Each module provides a set of commands for different security tasks.

recon
social
dork
hash
osint
exploit
crack
automation

Use /help in any channel to list all commands for the active module.

Multi‑Platform Commands

Yellow Box Phish listens on all configured platforms simultaneously. Type your command and the tool executes it in the background, returning results to the same channel.

/scan domain.com
/whois 8.8.8.8
/dork site:gov
/hash md5:...
/subdomain target.com

Web Application

Yellow Box Phish includes a lightweight web dashboard. After installation, you can access the command interface directly from your browser. The web app supports real‑time logging and module switching.

http://localhost:5000/console

The web UI is fully responsive and works on mobile, tablet, and desktop.

live demo (mock)