goshs-labs/goshsFeature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
[](https://github.com/goshs-labs/goshs/blob/main/LICENSE)
[](https://github.com/goshs-labs/goshs/issues)
[](https://github.com/goshs-labs/goshs/releases)
[](https://github.com/goshs-labs/goshs/stargazers)
[](https://codecov.io/gh/goshs-labs/goshs)
[](https://scorecard.dev/viewer/?uri=github.com/goshs-labs/goshs)
[](https://www.bestpractices.dev/projects/13477)
<img src="https://raw.githubusercontent.com/patrickhener/image-cdn/main/goshs-banner-light.png?raw=true" alt="goshs-logo" height="100">
You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and `python3 -m http.server` won't cut it.
**goshs** is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S, basic auth, share links, DNS/SMTP callbacks, NTLM hash capture + cracking — all from one command.
<kbd><img src="https://raw.githubusercontent.com/patrickhener/image-cdn/main/goshs-screenshot-v2.png?raw=true" alt="goshs-screenshot-light"></kbd>
<kbd><img src="https://raw.githubusercontent.com/patrickhener/image-cdn/main/goshs-screenshot-v2-dark.png?raw=true" alt="goshs-screenshot-dark"></kbd>
### Demo
**Try it out yourself: [demo.goshs.de](https://demo.goshs.de)**
# Quick Start
```bash
# Serve the current directory on port 8000
goshs
# Serve with HTTPS (self-signed) and basic auth
goshs -s -ss -b user:password
# Capture SMB hashes
goshs -smb -smb-domain CORP
# Capture LDAP credentials and NTLM hashes (with optional wordlist cracking)
goshs -ldap
goshs -ldap -ldap-wordlist /usr/share/wordlists/rockyou.txt
# Catch DNS callbacks and receive emails
goshs -dns -dns-ip 1.2.3.4 -smtp -smtp-domain your-domain.com
# Self-destruct after 2 hours
goshs --ttl 2h
# Run with the interactive terminal dashboard (great for headless SSH sessions)
goshs --tui
# Serve payloads that auto-fill your callback host/port at download time
goshs -i 10.10.14.7 --template --tpl-var LPORT=4444
# fetch rendered: curl 'http://10.10.14.7:8000/rev.ps1?tpl'
```
# Documentation
For a detailed documentation go to [docs.goshs.de](https://docs.goshs.de)
# Features
| | |
|---|---|
| 📁 **File Operations** | Download (resumable & seekable via HTTP Range), upload (drag & drop, POST/PUT), delete, bulk ZIP, QR codes |
| 🔌 **Protocols** | HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S |
| 🔒 **Auth & Security** | Basic auth, certificate auth, TLS (self-signed, Let's Encrypt, custom cert), IP whitelist, file-based ACLs |
| ⚙️ **Server Modes** | Read-only, upload-only, no-delete, silent, invisible, CLI command execution, TTL self-destruct |
| 🔗 **Share Links** | Token-based sharing, download limit, time limit |
| 🎯 **Collaboration / CTF** | Live team chat (markdown, emoji + `:shortcodes:` autosuggest, image paste, file upload, reactions, message edit, optional disk persistence — shared web ↔ TUI), DNS server, SMTP server, SMB NTLM hash capture + cracking, LDAP credential capture + NTLM hash cracking (JNDI mode for Log4Shell), redirect endpoint, Rev Shell Catcher + Payload generator |
| 🧩 **Payload Templating** | Render `{{.LHOST}}`/`{{.LPORT}}` + custom `--tpl-var` values into served files on demand (`?tpl`) |
| 🔔 **Integration** | Webhooks, tunnel via localhost.run, config file, JSON API, mDNS |
| 🖥️ **TUI Dashboard** | Interactive full-screen terminal dashboard; live panes for HTTP, DNS, SMB, LDAP, SMTP, reverse shells and team chat; attach and upgrade shells from the terminal |
| 🛠️ **Misc** | Dark/light themes, team chat, self-update, log output, embed files, drop privileges |
# Installation
| Method | |
|---|---|
| 🐧 **curl \| sh** | `curl -sSfL https://goshs.de/install.sh \| sh` |
| 🦫 **Go** | `go install goshs.de/goshs/v2@latest` |
| 🐉 **Kali & Parrot OS** | `sudo apt install goshs` |
| 🎗️ **Arch Linux (AUR)** | `yay -S goshs-bin` |
| 🖤 **BlackArch** | `pacman -S goshs` |
| 🏔️ **Alpine Linux (edge)** | `apk add goshs` |
| 🫙 **Snap** | `snap install goshs` |
| 🎩 **Fedora / RHEL (COPR)** | `dnf copr enable goshs-labs/goshs && dnf install goshs` |
| 🦎 **openSUSE** | `sudo zypper install goshs` |
| ❄️ **Nix / NixOS** | `nix-env -iA nixpkgs.goshs` |
| 🍺 **Homebrew** | `brew install goshs` |
| 🪟 **Scoop** | `scoop bucket add extras && scoop install extras/goshs` |
| 🪟 **winget** | `winget install GoshsLabs.Goshs` |
| 🍫 **Chocolatey** | `choco install goshs` |
| 🐳 **Docker** | `docker run --rm -it -p 8000:8000 -v "$PWD:/pwd" goshs-labs/goshs:latest -d /pwd` |
| 📦 **Release** | [Download from GitHub Releases](https://github.com/goshs-labs/goshs/releases) |
<details>
<summary>🐚 Shell completion</summary>
goshs can install tab completion for bash, fish, and zsh:
```bash
goshs --completion bash
goshs --completion fish
goshs --completion zsh
```
On macOS with Homebrew the correct Homebrew path is used automatically.
After installation the command prints an exact activation instruction, e.g.:
```
source ~/.local/share/bash-completion/completions/goshs
```
</details>
<details>
<summary>🔧 Build yourself</summary>
The bundled web assets are committed, so a plain build just works:
```bash
git clone https://github.com/goshs-labs/goshs.git
cd goshs
go build -o goshs .
```
If you change the JavaScript or SCSS sources, rebuild the assets first with
[esbuild](https://github.com/evanw/esbuild) and [sass](https://sass-lang.com/install) installed:
```bash
make generate
go build -o goshs .
```
</details>
# Code Contributors
[](https://github.com/goshs-labs/goshs/graphs/contributors)
# Security Contributors
These are the awesome contributors that made `goshs` even more secure :heart:
<table><tr>
<td align="center"><a href="https://github.com/marduc812"><img src="https://assets.kitploit.com/production/public/readmes/13920/ebd22b591ea7475fe274bc5a107af48bf042a4a6cf96fc238498f9f7de22a501.png" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/autobot23920"><img src="https://assets.kitploit.com/production/public/readmes/13920/eb383a83e5f8600ce4841bc720c9fdc25ebf7bec63957db5f502717a93a6274f.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/R1ZZG0D"><img src="https://assets.kitploit.com/production/public/readmes/13920/3f756322db667b58a3bc724d0dcf82ffdf9f8ec6aeb799c34c9ec1bd31b05329.png" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/jaisurya-me"><img src="https://assets.kitploit.com/production/public/readmes/13920/019aa7599811d3a29aecca2b12a5ac21d1fc5c5aceafc75889486c0c32b148a1.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/offset"><img src="https://assets.kitploit.com/production/public/readmes/13920/5f0d357419cca085d2abee7944916e2f170352a2f5db5dfe099be57a6dee399b.png" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/black-shadow-007"><img src="https://assets.kitploit.com/production/public/readmes/13920/7d0cb5313f73e989374065296815a2b61336bb37395370d1d1604a8fe3608190.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/anir0y"><img src="https://assets.kitploit.com/production/public/readmes/13920/00c4f052511cb6864495e7433a368fb6b4711e7c76d60af60c264982830e59b2.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/yukikamome316"><img src="https://assets.kitploit.com/production/public/readmes/13920/e4034308e61865d74e5989f563ba1768be4755b3275e59dce1c897aa938de8d5.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/tonghuaroot"><img src="https://assets.kitploit.com/production/public/readmes/13920/751ee948d3627095bf60e9e3e60f34bd73234cbe371b57cfec63470092113d08.jpg" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/arpitjain099"><img src="https://assets.kitploit.com/production/public/readmes/13920/a1e22c7e5453fdf91c14007ff0b62c074effd2c25abd5199fbe6de69f7aebf11/66f9e57aafb8682439edd41a2074487462bb51e525aa4209b87cdfd8cfab9efe-display-v1.webp" width="50" height="50"></a></td>
</tr>
<tr>
<td align="center"><a href="https://github.com/manus-use"><img src="https://assets.kitploit.com/production/public/readmes/13920/8c3dbdc1f8c2ca1714ec886b4078200a942ac1cb20fdafb66c2d851533335702/64fff65fe454ebf27dfa4deb6e0915bdb487073d9747e1985b70272b9941c370-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/shotintoeternity"><img src="https://assets.kitploit.com/production/public/readmes/13920/9e703f27db53a36d101d4332e210f35c55f1507ecd758e0d8779ae2c758383f9/121e23f1570ef7287577c0e9216314d18d432ebc77171ea7130065bf57658fbf-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/leanworld7-netizen"><img src="https://assets.kitploit.com/production/public/readmes/13920/2b6c05eb4067fcc2e4f33cec3c99694b647c0dfe9e3974ec05d944238963c699/ebc593f5e317ae02a9c80a0c2195d30b474996cc056e13b98551a16380b28f96-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/arbor-s"><img src="https://assets.kitploit.com/production/public/readmes/13920/1fed747673eab2e5904b4f898a8fd8e6fe96cea9600c29a4603e19932e86251c/a21a2c115a3701c660bc1d1e0bc8c9c8f901cbb7156915d9612e7c8fcb912fec-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/decsecre583"><img src="https://assets.kitploit.com/production/public/readmes/13920/3ff45bf817e231f5a56f80712f01082834f91e8042626fed231a3310e1eb67d7/e33ce77c0121ff17206b21869ff0d6574852a0194bfe77ef36f3269e59c94507-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/Forrof"><img src="https://assets.kitploit.com/production/public/readmes/13920/deb715bf1af37c5a03424a9189978b6507b89c699189ec669c579639ed594dcc/5712969a0456eaec6421de588f3281a105b5214f204bb7141a5f6c75d22820e1-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/manus-pi"><img src="https://assets.kitploit.com/production/public/readmes/13920/e602d7c9f8c79f8fb88bacf62b71d93a22e458e171bf303bbef6fd2805583f1f/626722408b245338e9f21c08845f383454868ca296cfb61ee340fb8d60f1d3fa-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/jimaf"><img src="https://assets.kitploit.com/production/public/readmes/13920/2cbe341ee62e044c3103e76748c2bc078fa8af3ee172d5046cf4c1618ade9ce8/78c1e36e2eb6add434761c29b3208e1d2b76cdc537089141c4d20f1dbfce2f5a-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/wooseokdotkim"><img src="https://assets.kitploit.com/production/public/readmes/13920/e183b5e03249b6dad1e60ef341a10b51ee46860232c4af3c35c400119767edbc/88f3c84b2ce571a9d3693cece101080734ff8d6437c85add63b9f1dcd562ee1d-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/Guilhem7"><img src="https://assets.kitploit.com/production/public/readmes/13920/745b70f3b8673c9ad9cc64e90d40308d5d208b46775bc1125c3d98aa11295919/27b944d4cb331a70a9fcad16a309a22348d7df735e13617c4979d7fb64cd1a5c-display-v1.webp" width="50" height="50"></a></td>
</tr>
<tr>
<td align="center"><a href="https://github.com/Hama1cco"><img src="https://assets.kitploit.com/production/public/readmes/13920/a34acaf5511af7f3e8905c6c980b0decd810aba202d22ea512755b22e33abee0/8681d926ea552d5087c3a889dd2d498bb4c1aaba55a660211d2129ede7178851-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/FrogApprentice"><img src="https://assets.kitploit.com/production/public/readmes/13920/72cb56c07f9e57fe0a545657a5e32615f0898bd5178cb43df368f0468623ef08/28778bbbcd7f2fddee4b2eb8c3a9ce69a3a34c7f33fe502c23ffc7e489f95ca4-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/xherogasm"><img src="https://assets.kitploit.com/production/public/readmes/13920/3c3a9ef9772aeb53fc87780270d1386d1199a13d4616f83aec68d5dad800c492/2b333ab87cad0a19b8b1c1afef6c915f7981344c4a0526c0b3239bd2b8db81f8-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/ray910408"><img src="https://assets.kitploit.com/production/public/readmes/13920/721317c83c6237995c81b9a18d01f25f837774b3d1f24c9857c554b34d849e36/9e88e09469eb6b1283fec291aa4291478d87c9ee9c5090343038d2a590f529e9-display-v1.webp" width="50" height="50"></a></td>
<td align="center"><a href="https://github.com/ozp3"><img src="https://assets.kitploit.com/production/public/readmes/13920/8357630d22aaaeaaaf351b9737eee90d51556c30c8e67ae29fc077368666f960/de4472b31c6e7307d9b84c71fc6103bbd817c19aa099cb01a9feb4078113a805-display-v1.webp" width="50" height="50"></a></td>
</tr></table>
# Community
Join the Discord Community and start connecting.
[](https://discord.gg/3ZnskY8HcJ)
# Star History
[](https://www.star-history.com/?repos=goshs-labs%2Fgoshs&type=date&legend=top-left)
# Credits
A special thank you goes to *sc0tfree* for inspiring this project with his project [updog](https://github.com/sc0tfree/updog) written in Python.