Versionv2.1.3
Revision11
Size7.1 MB
Licenseunset
Confinementstrict
Basecore24

Beyond Python's http.server — single-binary file server for pentesters


goshs is a single-binary file server for pentesters, CTF players, and
sysadmins. HTTP/S, WebDAV, SFTP, SMB, LDAP/S, NTLM hash capture,
DNS/SMTP callbacks — all from one command, zero dependencies.

Key features:
- File sharing: upload/download, drag & drop, QR codes, bulk ZIP, share links
- Protocols: HTTP/S, WebDAV, SFTP, SMB, LDAP/S
- Auth: basic auth, certificate auth, TLS (self-signed, Let's Encrypt, custom)
- Red team: SMB/LDAP NTLM hash capture + cracking, JNDI/Log4Shell mode,
DNS/SMTP out-of-band callbacks, reverse shell catcher, redirect endpoint
- Tunnel via localhost.run, webhooks, mDNS, IP allowlist, shell completion
- Self-update: goshs --update

Update History

v2.1.2 (9)v2.1.3 (11)
25 Jun 2026, 14:00 UTC
v2.1.1 (7)v2.1.2 (9)
23 Jun 2026, 14:30 UTC
v2.0.0-beta.3+git193.91b71d3 (5)v2.1.1 (7)
17 Jun 2026, 19:15 UTC
v2.0.0-beta.3+git173.8fc1e91 (3)v2.0.0-beta.3+git193.91b71d3 (5)
29 May 2026, 10:30 UTC
v2.0.0-beta.3+git149.568b838 (1)v2.0.0-beta.3+git173.8fc1e91 (3)
27 May 2026, 14:00 UTC
v2.0.0-beta.3+git149.568b838 (1)
13 May 2026, 13:45 UTC

Published13 May 2026, 13:33 UTC

Last updated25 Jun 2026, 13:43 UTC

First seen13 May 2026, 13:45 UTC