# goshs mit Homebrew, apk, Nix, zypper, scoop, winget installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für goshs in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:goshs ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install goshs ``` Evidenz: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add goshs ``` Evidenz: Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#goshs ``` Evidenz: nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install goshs ``` Evidenz: openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install extras/goshs ``` Evidenz: Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id GoshsLabs.Goshs -e ``` Evidenz: Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## Paketfakten - **Paketschlüssel:** brew:goshs - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 2.1.4 - **Quellzusammenfassung:** Simple, yet feature-rich web server written in Go - **Homepage:** - **Repository:** - **Upstream-Dokumentation:** - **Lizenz:** MIT - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-03T10:38:16Z - **Generiert:** 2026-07-25T07:20:51+00:00 ## Executables - goshs (cli) - goshs (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-07-25 - Manager-Version: 2.1.4 - Manager aktualisiert: 2026-07-03 - lokale Daten: OK - Upstream-Repository: https://github.com/goshs-labs/goshs - neueste erkannte Version: v2.1.4 (aktuell) ## Projektgeschichte und Nutzung goshs is a Go single-binary file server aimed at situations where Python's SimpleHTTPServer style sharing is too limited. Its project materials frame it for red-team, pentest, CTF, and quick file-transfer workflows, combining HTTP/S with protocols and security-oriented helpers such as WebDAV, FTP/SFTP, SMB, LDAP/S, DNS and SMTP callbacks, NTLM hash capture, share links, authentication, and a terminal dashboard. ### Projektgeschichte The project grew from the familiar local-file-server niche into a penetration-testing utility. The README explicitly credits updog as inspiration, which places goshs in the lineage of small engagement-friendly servers that trade web-server configuration for a single command. The 2.x documentation and release notes show a broadening scope: v2.0.0 emphasized SMB, DNS, SMTP, redirects, ACLs, and share links; later 2.1 releases added a TUI, self-destruct timers, payload templating, range downloads, TFTP, and reverse-shell payload generation. The project also moved to the goshs-labs GitHub organization during the v2.1.0 line. ### Adoptionsgeschichte goshs is packaged for Homebrew and is also advertised by the project for Kali/Parrot, Arch AUR, BlackArch, Alpine, Snap, Fedora/RHEL COPR, openSUSE, Nix/NixOS, Scoop, winget, Chocolatey, Docker, Go install, and GitHub Releases. That spread matches a tool meant to be dropped quickly onto operator workstations, lab VMs, and disposable engagement environments. ### Wie es verwendet wird Typical usage starts a web server for the working directory, then enables only the pieces needed for a task: HTTPS and basic auth for protected sharing, SMB or LDAP for credential and hash capture, DNS/SMTP callbacks for interaction tracking, WebDAV/FTP/SFTP/TFTP for protocol-specific transfer, TTL for temporary servers, or the TUI for SSH sessions without a browser. ### Warum Paket-Nerds sich dafür interessieren Package maintainers care about goshs because it is a feature-dense single binary with a Go module path, release artifacts, shell completions, container images, and many optional behaviors hidden behind flags rather than separate services. It also carries security-sensitive behavior, so packaging and upgrade cadence matter more than for a plain static file server. ### Zeitleiste - 2025: Security advisory GHSA-rwj2-w85g-5cmm documents a command-execution exposure tested against goshs 1.0.4 and notes the command feature was introduced in 0.3.4. - 2026-05: v2.1.0 release notes record the move to github.com/goshs-labs/goshs and several security fixes. - 2026-06: 2.1 releases add a TUI, TTL shutdown, payload templating, resumable downloads, TFTP, reverse-shell payload generation, and packaging/CI updates. ### Related projects - updog is credited by goshs as project inspiration. - Python's SimpleHTTPServer/http.server is the baseline goshs positions itself beyond. - ConPtyShell appears in goshs release notes as an on-demand helper for Windows shell upgrades. ### Quellen - - - - - ## Sicherheitshinweise Für goshs wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .goshs ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** goshs - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Nix - goshs: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - goshs - 2.1.0-r0: normalized package name match | Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. | https://goshs.de - apk - goshs-doc - 2.1.0-r0: normalized package name match | Alpine Linux edge package indexes: goshs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. (documentation) | https://goshs.de - zypper - goshs - 2.1.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | A simple HTTP server | https://goshs.de/ - Scoop - extras/goshs: normalized package name match | Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget - GoshsLabs.Goshs: normalized package name match | Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix - winget - PatrickHener.Goshs: normalized package name match | Windows Package Manager source index: PatrickHener.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## Verwandte Links - [Terminal utility packages](https://www.automicvault.com/de/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/de/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/de/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/de/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://www.automicvault.com/de/pkg/brew/go/) - Build dependency declared by Homebrew. - [ffuf](https://www.automicvault.com/de/pkg/brew/ffuf/) - Shares av.db curated category or tags: cli, go, pentesting, security. - [authz0](https://www.automicvault.com/de/pkg/brew/authz0/) - Shares av.db curated category or tags: cli, go, security. - [ccheck](https://www.automicvault.com/de/pkg/brew/ccheck/) - Shares av.db curated category or tags: cli, go, security. - [chamber](https://www.automicvault.com/de/pkg/brew/chamber/) - Shares av.db curated category or tags: cli, go, security. - [chaos-client](https://www.automicvault.com/de/pkg/brew/chaos-client/) - Shares av.db curated category or tags: cli, go, security. - [cyclonedx-gomod](https://www.automicvault.com/de/pkg/brew/cyclonedx-gomod/) - Shares av.db curated category or tags: cli, go, security. - [enpass-cli](https://www.automicvault.com/de/pkg/brew/enpass-cli/) - Shares av.db curated category or tags: cli, go, security. - [favirecon](https://www.automicvault.com/de/pkg/brew/favirecon/) - Shares av.db curated category or tags: cli, go, security. - [gobuster](https://www.automicvault.com/de/pkg/brew/gobuster/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, file, go, security, web. - [feroxbuster](https://www.automicvault.com/de/pkg/brew/feroxbuster/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, simple, web, written. ## Combined YAML source View the package source record on GitHub. [combined/goshs.yml](https://github.com/automic-vault/db/blob/main/combined/goshs.yml) ## Quellen - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph