Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
dark-doh — Covert file-transfer tool using DNS-over-HTTPS: encodes payload chunks in TXT records, applies XOR obfuscation, and can execute shellcode for red-team or educational testing. | Kitploit
Tools/GitHubGitHub/darksh3llru/dark-doh
Data ExfiltrationCommand and ControlRed Teaming
GitHubdarksh3llru/dark-doh

dark-doh

Covert file-transfer tool using DNS-over-HTTPS: encodes payload chunks in TXT records, applies XOR obfuscation, and can execute shellcode for red-team or educational testing.

View Repository
19332 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

dark-doh.exe public version

Purpose: Download files via DoH, or download and execute a shellcode (not implemented in the public version)

  • Run example: dark-doh.exe file1 download google yourdomain.com
  • The supporting python script for DNS zone generation added (py-prepzones.py).

!!! Disclaimer !!!

  • The authors do not have any responsibility and/or liability for how you will use the dark-doh.exe!
  • Everything that anyone can find in this repository is only for educational and research purposes, and the authors have no responsibility for how you will use the data found.

Changelog:

  • dark-doh-v1.0rc-public.exe release:

    • data download
    • Google as DoH provider
    • data chunks and XOR-key (4 bytes) are stored in the TXT record
    • data chunks are stored in the alphanumeric format
    • UPX packed binary (no src for a moment)

  • dark-doh-v1.0-public.exe release:

    • source code available for the public version
    • data download via DoH, execution could be added by yourself
    • Google as DoH provider, others could be added by yourself or mixing
    • works with bind9 and dnslib zoneresolver.py (py-prepzones.py updated)
    • supports long TXT records (up to 2048), length of each record is slightly randomized
    • string obfuscation (https://github.com/adamyaxley/Obfuscate)
    • json parsing (https://github.com/Tencent/rapidjson)
Download Tool