# 使用 Homebrew, apk, Nix, zypper, scoop, winget 安装 goshs 查看 goshs 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:goshs ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install goshs ``` 证据: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add goshs ``` 证据: Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#goshs ``` 证据: nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install goshs ``` 证据: openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install extras/goshs ``` 证据: Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id GoshsLabs.Goshs -e ``` 证据: Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## 软件包事实 - **软件包键:** brew:goshs - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 2.1.4 - **来源摘要:** Simple, yet feature-rich web server written in Go - **主页:** - **仓库:** - **上游文档:** - **许可证:** MIT - **源码归档:** - **最后更新:** 2026-07-03T10:38:16Z - **已生成:** 2026-07-25T07:20:51+00:00 ## 可执行文件 - goshs (cli) - goshs (别名) ## 构建依赖 - go ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-07-25 - 管理器版本: 2.1.4 - 管理器更新时间: 2026-07-03 - 本地数据: OK - 上游仓库: https://github.com/goshs-labs/goshs - 检测到的最新版本: v2.1.4 (当前) ## 项目历史与用法 goshs is a Go single-binary file server aimed at situations where Python's SimpleHTTPServer style sharing is too limited. Its project materials frame it for red-team, pentest, CTF, and quick file-transfer workflows, combining HTTP/S with protocols and security-oriented helpers such as WebDAV, FTP/SFTP, SMB, LDAP/S, DNS and SMTP callbacks, NTLM hash capture, share links, authentication, and a terminal dashboard. ### 项目历史 The project grew from the familiar local-file-server niche into a penetration-testing utility. The README explicitly credits updog as inspiration, which places goshs in the lineage of small engagement-friendly servers that trade web-server configuration for a single command. The 2.x documentation and release notes show a broadening scope: v2.0.0 emphasized SMB, DNS, SMTP, redirects, ACLs, and share links; later 2.1 releases added a TUI, self-destruct timers, payload templating, range downloads, TFTP, and reverse-shell payload generation. The project also moved to the goshs-labs GitHub organization during the v2.1.0 line. ### 采用历史 goshs is packaged for Homebrew and is also advertised by the project for Kali/Parrot, Arch AUR, BlackArch, Alpine, Snap, Fedora/RHEL COPR, openSUSE, Nix/NixOS, Scoop, winget, Chocolatey, Docker, Go install, and GitHub Releases. That spread matches a tool meant to be dropped quickly onto operator workstations, lab VMs, and disposable engagement environments. ### 使用方式 Typical usage starts a web server for the working directory, then enables only the pieces needed for a task: HTTPS and basic auth for protected sharing, SMB or LDAP for credential and hash capture, DNS/SMTP callbacks for interaction tracking, WebDAV/FTP/SFTP/TFTP for protocol-specific transfer, TTL for temporary servers, or the TUI for SSH sessions without a browser. ### 为什么软件包爱好者会关心 Package maintainers care about goshs because it is a feature-dense single binary with a Go module path, release artifacts, shell completions, container images, and many optional behaviors hidden behind flags rather than separate services. It also carries security-sensitive behavior, so packaging and upgrade cadence matter more than for a plain static file server. ### 时间线 - 2025: Security advisory GHSA-rwj2-w85g-5cmm documents a command-execution exposure tested against goshs 1.0.4 and notes the command feature was introduced in 0.3.4. - 2026-05: v2.1.0 release notes record the move to github.com/goshs-labs/goshs and several security fixes. - 2026-06: 2.1 releases add a TUI, TTL shutdown, payload templating, resumable downloads, TFTP, reverse-shell payload generation, and packaging/CI updates. ### Related projects - updog is credited by goshs as project inspiration. - Python's SimpleHTTPServer/http.server is the baseline goshs positions itself beyond. - ConPtyShell appears in goshs release notes as an on-demand helper for Windows shell upgrades. ### 来源 - - - - - ## 安全说明 没有找到 goshs 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .goshs ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** goshs - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Nix - goshs: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/goshs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - goshs - 2.1.0-r0: normalized package name match | Alpine Linux edge package indexes: goshs from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. | https://goshs.de - apk - goshs-doc - 2.1.0-r0: normalized package name match | Alpine Linux edge package indexes: goshs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A SimpleHTTPServer written in Go, enhanced with features and with a nice design. (documentation) | https://goshs.de - zypper - goshs - 2.1.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: goshs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | A simple HTTP server | https://goshs.de/ - Scoop - extras/goshs: normalized package name match | Scoop official bucket manifest trees: bucket/goshs.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget - GoshsLabs.Goshs: normalized package name match | Windows Package Manager source index: GoshsLabs.Goshs from https://cdn.winget.microsoft.com/cache/source.msix - winget - PatrickHener.Goshs: normalized package name match | Windows Package Manager source index: PatrickHener.Goshs from https://cdn.winget.microsoft.com/cache/source.msix ## 相关链接 - [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/zh-hans/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/zh-hans/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/zh-hans/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://www.automicvault.com/zh-hans/pkg/brew/go/) - Build dependency declared by Homebrew. - [ffuf](https://www.automicvault.com/zh-hans/pkg/brew/ffuf/) - Shares av.db curated category or tags: cli, go, pentesting, security. - [authz0](https://www.automicvault.com/zh-hans/pkg/brew/authz0/) - Shares av.db curated category or tags: cli, go, security. - [ccheck](https://www.automicvault.com/zh-hans/pkg/brew/ccheck/) - Shares av.db curated category or tags: cli, go, security. - [chamber](https://www.automicvault.com/zh-hans/pkg/brew/chamber/) - Shares av.db curated category or tags: cli, go, security. - [chaos-client](https://www.automicvault.com/zh-hans/pkg/brew/chaos-client/) - Shares av.db curated category or tags: cli, go, security. - [cyclonedx-gomod](https://www.automicvault.com/zh-hans/pkg/brew/cyclonedx-gomod/) - Shares av.db curated category or tags: cli, go, security. - [enpass-cli](https://www.automicvault.com/zh-hans/pkg/brew/enpass-cli/) - Shares av.db curated category or tags: cli, go, security. - [favirecon](https://www.automicvault.com/zh-hans/pkg/brew/favirecon/) - Shares av.db curated category or tags: cli, go, security. - [gobuster](https://www.automicvault.com/zh-hans/pkg/brew/gobuster/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, file, go, security, web. - [feroxbuster](https://www.automicvault.com/zh-hans/pkg/brew/feroxbuster/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, simple, web, written. ## Combined YAML source View the package source record on GitHub. [combined/goshs.yml](https://github.com/automic-vault/db/blob/main/combined/goshs.yml) ## 来源 - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph