{
	"id": "adafa879-0bf6-4d14-9011-c8956ceb87e0",
	"created_at": "2026-04-06T00:08:45.186726Z",
	"updated_at": "2026-04-10T13:13:09.00879Z",
	"deleted_at": null,
	"sha1_hash": "9565d21f028a383afae7d8f72da2872838e50de7",
	"title": "GitHub - sensepost/godoh: ?????? godoh - A DNS-over-HTTPS C2",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 57315,
	"plain_text": "GitHub - sensepost/godoh: 🕳 godoh - A DNS-over-HTTPS C2\r\nBy leonjza\r\nArchived: 2026-04-05 20:04:28 UTC\r\nA DNS-over-HTTPS Command \u0026 Control Proof of Concept\r\nTTwwiitttteerr @@lleeoonnjjzzaa\r\n ggoo rreeppoorrtt A +\r\nintroduction\r\ngodoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS\r\nas a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to\r\nuse traditional DNS.\r\ninstallation\r\nAll you would need are the godoh binaries themselves. Binaries are available for download from the releases\r\npage as part of tagged releases.\r\nTo build godoh from source, follow the following steps:\r\nEnsure you have Go 1.13+\r\nClone this repository with git clone https://github.com/sensepost/goDoH.git\r\nRun make key to generate a unique encryption key to use for communication\r\nBuild the project with one of the following options:\r\ngo build which will drop you a new godoh binary for the current architecture\r\nmake which will drop binaries in the build/ directory for various platforms\r\nusage\r\nA DNS (over-HTTPS) C2\r\n By @leonjza from @sensepost\r\nUsage:\r\n godoh [flags]\r\n godoh [command]\r\nAvailable Commands:\r\n agent Connect as an Agent to the DoH C2\r\n c2 Starts the godoh C2 server\r\n help Help about any command\r\n receive Receive a file via DoH\r\nhttps://github.com/sensepost/goDoH\r\nPage 1 of 2\n\nsend Send a file via DoH\r\n test Test DNS communications\r\nFlags:\r\n -d, --domain string DNS Domain to use. (ie: example.com)\r\n -h, --help help for godoh\r\n -p, --provider string Preferred DNS provider to use. [possible: googlefront, google, cloudfl\r\n -K, --validate-certificate Validate DoH provider SSL certificates\r\nUse \"godoh [command] --help\" for more information about a command.\r\nlicense\r\ngodoh is licensed under a GNU General Public v3 License. Permissions beyond the scope of this license may be\r\navailable at http://sensepost.com/contact/.\r\nSource: https://github.com/sensepost/goDoH\r\nhttps://github.com/sensepost/goDoH\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/sensepost/goDoH"
	],
	"report_names": [
		"goDoH"
	],
	"threat_actors": [],
	"ts_created_at": 1775434125,
	"ts_updated_at": 1775826789,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/9565d21f028a383afae7d8f72da2872838e50de7.pdf",
		"text": "https://archive.orkl.eu/9565d21f028a383afae7d8f72da2872838e50de7.txt",
		"img": "https://archive.orkl.eu/9565d21f028a383afae7d8f72da2872838e50de7.jpg"
	}
}