Skip to content

Latest commit

 

History

History
149 lines (107 loc) · 6.9 KB

File metadata and controls

149 lines (107 loc) · 6.9 KB

Version GitHub License GitHub go.mod Go version GitHub issues goreleaser Go Report Card codecov

goshs-logo

You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it.

goshs is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S, basic auth, share links, DNS/SMTP callbacks, NTLM hash capture + cracking — all from one command.

intro

goshs-screenshot-light goshs-screenshot-dark

Demo

Try it out yourself: demo.goshs.de

goshs-demo

Quick Start

# Serve the current directory on port 8000
goshs

# Serve with HTTPS (self-signed) and basic auth
goshs -s -ss -b user:password

# Capture SMB hashes
goshs -smb -smb-domain CORP

# Capture LDAP credentials and NTLM hashes (with optional wordlist cracking)
goshs -ldap
goshs -ldap -ldap-wordlist /usr/share/wordlists/rockyou.txt

# Catch DNS callbacks and receive emails
goshs -dns -dns-ip 1.2.3.4 -smtp -smtp-domain your-domain.com

Documentation

For a detailed documentation go to docs.goshs.de

Features

📁 File Operations Download, upload (drag & drop, POST/PUT), delete, bulk ZIP, QR codes
🔌 Protocols HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S
🔒 Auth & Security Basic auth, certificate auth, TLS (self-signed, Let's Encrypt, custom cert), IP whitelist, file-based ACLs
⚙️ Server Modes Read-only, upload-only, no-delete, silent, invisible, CLI command execution
🔗 Share Links Token-based sharing, download limit, time limit
🎯 Collaboration / CTF DNS server, SMTP server, SMB NTLM hash capture + cracking, LDAP credential capture + NTLM hash cracking (JNDI mode for Log4Shell), redirect endpoint, Rev Shell Catcher + Payload generator
🔔 Integration Webhooks, tunnel via localhost.run, config file, JSON API, mDNS
🛠️ Misc Dark/light themes, clipboard, self-update, log output, embed files, drop privileges

Installation

Method
🐧 curl | sh curl -sSfL https://goshs.de/install.sh | sh
🦫 Go go install goshs.de/goshs/v2@latest
🐉 Kali & Parrot OS sudo apt install goshs
🎗️ Arch Linux (AUR) yay -S goshs-bin
🖤 BlackArch pacman -S goshs
🏔️ Alpine Linux (edge) apk add goshs
🫙 Snap snap install goshs
🎩 Fedora / RHEL (COPR) dnf copr enable goshs-labs/goshs && dnf install goshs
🦎 openSUSE sudo zypper install goshs
❄️ Nix / NixOS nix-env -iA nixpkgs.goshs
🍺 Homebrew brew install goshs
🪟 Scoop scoop bucket add extras && scoop install extras/goshs
🪟 winget winget install GoshsLabs.Goshs
🍫 Chocolatey choco install goshs
🐳 Docker docker run --rm -it -p 8000:8000 -v "$PWD:/pwd" goshs-labs/goshs:latest -d /pwd
📦 Release Download from GitHub Releases
🐚 Shell completion

goshs can install tab completion for bash, fish, and zsh:

goshs --completion bash
goshs --completion fish
goshs --completion zsh

On macOS with Homebrew the correct Homebrew path is used automatically. After installation the command prints an exact activation instruction, e.g.:

source ~/.local/share/bash-completion/completions/goshs
🔧 Build yourself

Building requirements are esbuild and sass. After installing these packages run:

git clone https://github.com/goshs-labs/goshs.git
cd goshs
make build-all

Code Contributors

Contributors

Security Contributors

These are the awesome contributors that made goshs even more secure ❤️

wooseokdotkim Guilhem7

Community

Join the Discord Community and start connecting.

Join Discord

Star History

Star History Chart

Credits

A special thank you goes to sc0tfree for inspiring this project with his project updog written in Python.