goshs - Feature-rich single-binary file server for red tea

项目说明

!
![GitHub License]()
!GitHub go.mod Go
![GitHub issues]()
![Downloads]()
![Stars]()
!goreleaser
![codecov]()
![OpenSSF Scorecard]()
![OpenSSF Best Practices]()

<img src=" alt="goshs-logo" height="100">

You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it.

goshs is a single-binary file ser for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S, basic auth, share links, DNS/SMTP callbacks, NTLM hash capture + cracking — all from one command.

!intro

<kbd><img src=" alt="goshs-screenshot-light"></kbd>
<kbd><img src=" alt="goshs-screenshot-dark"></kbd>

Demo

Try it out yourself: demo.goshs.de

!goshs-demo

Quick Start

Documentation

For a detailed documentation go to docs.goshs.de

Features

| | |
|---|---|
| 📁 File Operations | Download (resumable & seekable via HTTP Range), upload (drag & drop, POST/PUT), delete, bulk ZIP, QR codes |
| 🔌 Protocols | HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S |
| 🔒 Auth & Security | Basic auth, certificate auth, TLS (self-signed, Let's Encrypt, custom cert), IP whitelist, file-based ACLs |
| ⚙️ Ser | Read-only, upload-only, no-delete, silent, in, CLI command execution, TTL self-destruct |
| 🔗 Share Links | Token-based sharing, download limit, time limit |
| 🎯 Collaboration / CTF | Live team chat (markdown, emoji + :shortcodes: autosuggest, image paste, file upload, reactions, message edit, optional disk persistence — shared web ↔ TUI), DNS server, SMTP server, SMB NTLM hash capture + cracking, LDAP credential capture + NTLM hash cracking (JNDI mode for Log4Shell), redirect endpoint, Re Catcher + Payload generator |
| 🧩 Payload Templating | Render {{.LHOST}}/{{.LPORT}} + custom --tpl-var into ser on demand (?tpl) |
| 🔔 Integration | Webhooks, tunnel .run, config file, JSON API, mDNS |
| 🖥️ TUI Dashboard | Interacti terminal dashboard; li for HTTP, DNS, SMB, LDAP, SMTP, reverse shells and team chat; attach and upgrade shells from the terminal |
| 🛠️ Misc | Dark/light themes, team chat, self-update, log output, embed files, drop pri |

Installation

| Method | |
|---|---|
| 🐧 curl \| sh | curl -sSfL \| sh |
| 🦫 Go | go install goshs.de/goshs/v2 |
| 🐉 Kali & Parrot OS | sudo apt install goshs |
| 🎗️ Arch Linux (AUR) | yay -S goshs-bin |
| 🖤 BlackArch | pacman -S goshs |
| 🏔️ Alpine Linux (edge) | apk add goshs |
| 🫙 Snap | snap install goshs |
| 🎩 Fedora / RHEL (COPR) | dnf copr enable goshs-labs/goshs && dnf install goshs |
| 🦎 openSUSE | sudo zypper install goshs |
| ❄️ Nix / NixOS | nix-env -iA nixpkgs.goshs |
| 🍺 Homebrew | brew install goshs |
| 🪟 Scoop | scoop bucket add extras && scoop install extras/goshs |
| 🪟 winget | winget install GoshsLabs.Goshs |
| 🍫 Chocolatey | choco install goshs |
| 🐳 Docker | docker run --rm -it -p 8000:8000 -v "$PWD:/pwd" goshs-labs/goshs:latest -d /pwd |
| 📦 Release | Download from GitHub Releases |

<details>
<summary>🐚 Shell completion</summary>

goshs can install tab completion for bash, fish, and zsh:

On macOS with Homebrew the correct Homebrew path is used automatically.
After installation the command prints an exact acti instruction, e.g.:

</details>

<details>
<summary>🔧 Build yourself</summary>

The bundled web assets are committed, so a plain build just works:

If you change the Ja or SCSS sources, rebuild the assets first with
esbuild and sass installed:

</details>

Code Contributors

![Contributors]()

Security Contributors

These are the awesome contributors that made goshs even more secure :heart:

<table><tr>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
</tr>
<tr>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
</tr>
<tr>
<td align="center"><a href=" src=" width="50" height="50"></a></td>
</tr></table>

Community

Join the Discord Community and start connecting.

![Join Discord]()

Star History

![Star History Chart]()

Credits

A special thank you goes to *sc0tfree* for inspiring this project with his project updog written in Python.

项目信息

开发语言：Go

Star 数：986

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。