# goshs mit Homebrew, apk, Nix, zypper, scoop, winget installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für goshs in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:goshs ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install goshs ``` Evidenz: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add goshs ``` Evidenz: Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#goshs ``` Evidenz: nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install goshs ``` Evidenz: openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install extras/goshs ``` Evidenz: Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id GoshsLabs.Goshs -e ``` Evidenz: Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## Paketfakten - **Paketschlüssel:** brew:goshs - **Paketmanager:** Homebrew - **Version:** 2.1.5 - **Quellzusammenfassung:** Simple, yet feature-rich web server written in Go - **Homepage:** - **Repository:** - **Zuletzt aktualisiert:** 2026-08-02T09:07:09Z - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - goshs (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 2.1.5 ## Projektgeschichte und Nutzung goshs is a Go single-binary file server aimed at situations where Python's SimpleHTTPServer style sharing is too limited. Its project materials frame it for red-team, pentest, CTF, and quick file-transfer workflows, combining HTTP/S with protocols and security-oriented helpers such as WebDAV, FTP/SFTP, SMB, LDAP/S, DNS and SMTP callbacks, NTLM hash capture, share links, authentication, and a terminal dashboard. ### Projektgeschichte The project grew from the familiar local-file-server niche into a penetration-testing utility. The README explicitly credits updog as inspiration, which places goshs in the lineage of small engagement-friendly servers that trade web-server configuration for a single command. The 2.x documentation and release notes show a broadening scope: v2.0.0 emphasized SMB, DNS, SMTP, redirects, ACLs, and share links; later 2.1 releases added a TUI, self-destruct timers, payload templating, range downloads, TFTP, and reverse-shell payload generation. The project also moved to the goshs-labs GitHub organization during the v2.1.0 line. ### Adoptionsgeschichte goshs is packaged for Homebrew and is also advertised by the project for Kali/Parrot, Arch AUR, BlackArch, Alpine, Snap, Fedora/RHEL COPR, openSUSE, Nix/NixOS, Scoop, winget, Chocolatey, Docker, Go install, and GitHub Releases. That spread matches a tool meant to be dropped quickly onto operator workstations, lab VMs, and disposable engagement environments. ### Wie es verwendet wird Typical usage starts a web server for the working directory, then enables only the pieces needed for a task: HTTPS and basic auth for protected sharing, SMB or LDAP for credential and hash capture, DNS/SMTP callbacks for interaction tracking, WebDAV/FTP/SFTP/TFTP for protocol-specific transfer, TTL for temporary servers, or the TUI for SSH sessions without a browser. ### Warum Paket-Nerds sich dafür interessieren Package maintainers care about goshs because it is a feature-dense single binary with a Go module path, release artifacts, shell completions, container images, and many optional behaviors hidden behind flags rather than separate services. It also carries security-sensitive behavior, so packaging and upgrade cadence matter more than for a plain static file server. ### Zeitleiste - 2025: Security advisory GHSA-rwj2-w85g-5cmm documents a command-execution exposure tested against goshs 1.0.4 and notes the command feature was introduced in 0.3.4. - 2026-05: v2.1.0 release notes record the move to github.com/goshs-labs/goshs and several security fixes. - 2026-06: 2.1 releases add a TUI, TTL shutdown, payload templating, resumable downloads, TFTP, reverse-shell payload generation, and packaging/CI updates. ### Related projects - updog is credited by goshs as project inspiration. - Python's SimpleHTTPServer/http.server is the baseline goshs positions itself beyond. - ConPtyShell appears in goshs release notes as an on-demand helper for Windows shell upgrades. ### Quellen - - - - - ## Sicherheitshinweise Für goshs wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .goshs ## Andere Paketmanager-Einträge - Nix - goshs: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - goshs - 2.1.4-r1: normalized package name match | Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. | https://goshs.de - apk - goshs-doc - 2.1.4-r1: normalized package name match | Alpine Linux edge package indexes: goshs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. (documentation) | https://goshs.de - zypper - goshs - 2.1.4-1.2: normalized package name match | openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A simple HTTP server | https://goshs.de/ - Scoop - extras/goshs: normalized package name match | Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget - GoshsLabs.Goshs: normalized package name match | Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix - winget - PatrickHener.Goshs: normalized package name match | Windows Package Manager source index: PatrickHener.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/goshs.yml](https://github.com/mxcl/pkgdb/blob/main/combined/goshs.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph