A feature-rich single-binary file server for red teamers and developers, supporting HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S, NTLM hash capture, DNS/SMTP callbacks, and more.
- v2.1.7
- Published at
- 21d ago
- 986
- Stars
- 5,887
- Download
- Synced at
- 15d ago
Latest release
v2.1.7Sep 28, 2026, 07:17 AMDownloads slow? Switch the source anytime above
README
Project Overview
goshs is a single-binary file server built for red teamers and developers. It supports HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S, basic auth, share links, DNS/SMTP callbacks, and NTLM hash capture + cracking.
Key Features
- File operations: Download (resumable), upload (drag & drop), delete, bulk ZIP, QR codes
- Protocols: HTTP/S, WebDAV, FTP/SFTP, SMB, LDAP/S
- Auth & security: Basic auth, certificate auth, TLS, IP whitelist, file-based ACLs
- Server modes: Read-only, upload-only, no-delete, silent, invisible, CLI command execution, TTL self-destruct
- Share links: Token-based sharing with download and time limits
- Collaboration/CTF: DNS server, SMTP server, SMB NTLM hash capture + cracking, LDAP credential capture, reverse shell catcher
- Payload templating: Render
{{.LHOST}}/{{.LPORT}}and custom--tpl-varvalues
Target Audience
- Red teamers and penetration testers
- Developers who need a multi-functional file server
- CTF participants and security researchers
Quick Start
- Install:
curl -sSfL https://goshs.de/install.sh | sh - Basic usage:
goshsserves the current directory on port 8000 - HTTPS with basic auth:
goshs -s -ss -b user:password - SMB hash capture:
goshs -smb -smb-domain CORP
Core Advantages
- Single binary with rich features
- Multiple protocols and capture capabilities
- Terminal dashboard for headless SSH sessions
- Open-source and free
Release history
Sort