You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it.
goshs is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/S, WebDAV, SFTP, SMB, LDAP/S, basic auth, share links, DNS/SMTP callbacks, NTLM hash capture + cracking — all from one command.
Demo
Try it out yourself: demo.goshs.de
Quick Start
# Serve the current directory on port 8000 goshs # Serve with HTTPS (self-signed) and basic auth goshs -s -ss -b user:password # Capture SMB hashes goshs -smb -smb-domain CORP # Capture LDAP credentials and NTLM hashes (with optional wordlist cracking) goshs -ldap goshs -ldap -ldap-wordlist /usr/share/wordlists/rockyou.txt # Catch DNS callbacks and receive emails goshs -dns -dns-ip 1.2.3.4 -smtp -smtp-domain your-domain.com
Documentation
For a detailed documentation go to goshs.de
Features
| 📁 File Operations | Download, upload (drag & drop, POST/PUT), delete, bulk ZIP, QR codes |
| 🔌 Protocols | HTTP/S, WebDAV, SFTP, SMB, LDAP/S |
| 🔒 Auth & Security | Basic auth, certificate auth, TLS (self-signed, Let's Encrypt, custom cert), IP whitelist, file-based ACLs |
| ⚙️ Server Modes | Read-only, upload-only, no-delete, silent, invisible, CLI command execution |
| 🔗 Share Links | Token-based sharing, download limit, time limit |
| 🎯 Collaboration / CTF | DNS server, SMTP server, SMB NTLM hash capture + cracking, LDAP credential capture + NTLM hash cracking (JNDI mode for Log4Shell), redirect endpoint, Rev Shell Catcher + Payload generator |
| 🔔 Integration | Webhooks, tunnel via localhost.run, config file, JSON API, mDNS |
| 🛠️ Misc | Dark/light themes, clipboard, self-update, log output, embed files, drop privileges |
Installation
| Method | |
|---|---|
| 🦫 Go | go install goshs.de/goshs/v2@latest |
| 🐉 Kali | sudo apt install goshs |
| 🍺 Homebrew | brew install goshs |
| 🪟 Scoop | scoop bucket add extras && scoop install extras/goshs |
| 🐳 Docker | docker run --rm -it -p 8000:8000 -v "$PWD:/pwd" patrickhener/goshs:latest -d /pwd |
| 📦 Release | Download from GitHub Releases |
🔧 Build yourself
Building requirements are esbuild and sass. After installing these packages run:
git clone https://github.com/patrickhener/goshs.git
cd goshs
make build-allCode Contributors
Security Contributors
These are the awesome contributors that made goshs even more secure ❤️
Community
Join the Discord Community and start connecting.
Star History
Credits
A special thank you goes to sc0tfree for inspiring this project with his project updog written in Python.