yellow.git


yellow

~ opinionated web scanning pipeline for pentesters in a hurry
git clone https://github.com/djnnvx/yellow.git
log | files | refs | archive | README | LICENSE

datecommit messagefiles+-
2026-08-28chore(deps): bump dependencies+go version6+204-154
2026-08-09feat(scan): robots.txt and sitemap.xml are saved to the scan directory5+96-19
2026-08-09fix(cli): target files stream line by line5+71-11
2026-08-09fix(cli): fingerprint -d should only run wappalyzer and cvemap2+2-1
2026-08-09fix(scan): bind every response body read10+98-20
2026-08-08chore(release): v0.0.83+10-2
2026-08-08fix(scan): nuclei ignores non-match events, groups hits, records location1+119-0
2026-08-08feat(scan): nuclei collapses hosts that answer every path to one target3+251-23
2026-08-08fix(scan): katana drops out-of-scope URLs before they reach nuclei/gobuster2+71-4
2026-08-02feat(meta): ship the run-yellow skill in-repo3+142-0
2026-08-02feat(scan): checking secrets with gitleaks9+505-181
2026-08-02feat(osint): ASN/prefix lookup over DNS (cymru, shadowserver fallback), flags provider-owned ranges6+423-11
2026-08-02feat(scan): cdncheck annotates resolved IPs, skips port-scanning WAF edges8+158-20
2026-08-02eat(scan): katana headless crawl, feeds discovered URLs into nuclei and gobuster15+356-33
2026-08-02fix(docker): multi-stage image with chromium, CGO off1+13-4
2026-08-02fix(net): probe https then fall back to http, http-only hosts were skipped ~ @djnnvx6+82-19
2026-08-02fix(scan): open ports nerva cannot fingerprint no longer vanish from portscan.json3+88-3
2026-08-02chore(meta): update dependencies3+137-145
2026-06-16refactoring(core): remove dead code, simplify codebase16+166-323
2026-06-13chore(meta): bump to 0.0.73+5-2
2026-06-13chore(meta): trim changelog a bit1+15-44
2026-06-13feat(osint): alterx subdomain permutations7+159-16
2026-06-13feat(osint): gau support7+164-26
2026-06-13feat(core): refactoring+tlsx & nuclei support24+1858-620
2026-06-13fix(meta): many more reliability fixes (cf. CHANGELOG.txt)18+85-43
2026-06-13more reliability fixes6+26-39
2026-06-13fix(meta): warnings and nitpicks12+41-54
2026-06-13chore(meta): update dependencies3+63-56
2026-04-11chore(deps): bump dependencies (cf. CHANGELOG.txt)3+231-184
2026-03-28chore(meta): bumping nerva to 1.2.0 + using the new --misconfig flag6+278-198
2026-03-14chore(meta): bump nerva to 1.1.03+5-2
2026-03-14chore(meta): bump to 0.0.63+6-2
2026-03-12fix(scan): replace dead cvemap/vulnx API with NVD API v26+161-48
2026-03-12fixing changelog1+1-1
2026-03-12fix(scan|osint): resolve IPs before passing it to shodan/port-scan2+20-1
2026-03-12chore(deps): bump dependencies4+103-95
2026-03-08fix(git): conflicts7+164-6
2026-03-08feat(scan): adding port-scanning6+279-0
2026-02-01feat(osint): adding support for leaker7+154-6
2026-01-14chore(deps): bump dependencies2+362-494
2026-01-11fix(scan): nested directories while running scan1+12-10
2025-11-10fix(docs): README2+162-161
2025-11-09chore(notes): .md -> .txt3+161-167
2025-11-03chore(meta): bump to v0.0.53+5-2
2025-11-03feat(osint): support for shodan4+4-4
2025-11-03wip(osint): adding shodan module6+286-1
2025-10-24chore(meta): document new subcommands2+19-0
2025-10-24feat(cmd): adding prune subcommand4+129-25
2025-10-24feat(cmd): adding fingerprint subcommand5+102-14
2025-10-22feat(meta): adding run-web-recon script3+214-0
55 more commits remaining, fetch the repository