https://github.com/goshs-labs/goshs
capture-the-flag ctf devtools dns-server file-server file-transfer golang http-server https-server kali-linux ldap ntlm offensive-security penetration-testing red-teaming security-tools sftp smb smtp-server webdav
Score: -Infinity
Last synced: about 6 hours ago
JSON representation
Repository metadata:
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- Host: GitHub
- URL: https://github.com/goshs-labs/goshs
- Owner: goshs-labs
- License: mit
- Created: 2020-10-02T08:24:17.000Z (almost 6 years ago)
- Default Branch: main
- Last Pushed: 2026-08-24T07:46:26.000Z (3 days ago)
- Last Synced: 2026-08-25T14:32:27.522Z (1 day ago)
- Topics: capture-the-flag, ctf, devtools, dns-server, file-server, file-transfer, golang, http-server, https-server, kali-linux, ldap, ntlm, offensive-security, penetration-testing, red-teaming, security-tools, sftp, smb, smtp-server, webdav
- Language: Go
- Homepage: https://goshs.de
- Size: 9.76 MB
- Stars: 959
- Watchers: 6
- Forks: 58
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Owner metadata:
- Name: goshs-labs
- Login: goshs-labs
- Email:
- Kind: organization
- Description:
- Website: https://goshs.de
- Location: Germany
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/288591202?v=4
- Repositories: 1
- Last Synced at: 2026-05-28T11:23:27.823Z
- Profile URL: https://github.com/goshs-labs
GitHub Events
Total
- Create event: 13
- Delete event: 13
- Fork event: 1
- Issue comment event: 1
- Push event: 46
- Total: 74
Last Year
- Create event: 13
- Delete event: 13
- Fork event: 1
- Issue comment event: 1
- Push event: 46
- Total: 74
Committers metadata
Last synced: 1 day ago
Total Commits: 654
Total Committers: 11
Avg Commits per committer: 59.455
Development Distribution Score (DDS): 0.272
Commits in past year: 335
Committers in past year: 3
Avg Commits per committer in past year: 111.667
Development Distribution Score (DDS) in past year: 0.212
| Name | Commits | |
|---|---|---|
| Patrick Hener | p****r@p****e | 476 |
| dependabot[bot] | 4****] | 77 |
| Patrick Hener | p****r@s****e | 55 |
| Patrick Hener | p****r@t****m | 31 |
| aWZHY0yQH81uOYvH | 3****H | 7 |
| Oleksandr Redko | o****b@g****m | 3 |
| ty3tx | t****8@p****u | 1 |
| parzel | p****l@p****e | 1 |
| Hazegard | m****e@o****m | 1 |
| Andrew Gordon | a****n@g****m | 1 |
| Vagelis | e****s@c****m | 1 |
Issue and Pull Request metadata
Last synced: about 6 hours ago
Total issues: 20
Total pull requests: 119
Average time to close issues: 1 day
Average time to close pull requests: 1 day
Total issue authors: 15
Total pull request authors: 5
Average comments per issue: 2.8
Average comments per pull request: 0.41
Merged pull request: 101
Bot issues: 0
Bot pull requests: 89
Past year issues: 17
Past year pull requests: 114
Past year average time to close issues: 1 day
Past year average time to close pull requests: 1 day
Past year issue authors: 13
Past year pull request authors: 3
Past year average comments per issue: 2.94
Past year average comments per pull request: 0.36
Past year merged pull request: 96
Past year bot issues: 0
Past year bot pull requests: 88
Top Issue Authors
- patrickhener (4)
- leanworld7-netizen (2)
- matthiasbeyer (2)
- dleto614 (1)
- bompit1 (1)
- Fnnnr (1)
- juanfra684 (1)
- schieni (1)
- ionv06 (1)
- avioli (1)
- delatvan (1)
- Matheuz7k (1)
- Robert-M-Muench (1)
- anir0y (1)
- shotintoeternity (1)
Top Pull Request Authors
- dependabot[bot] (89)
- patrickhener (25)
- alexandear (3)
- ty3gx (1)
- parzel (1)
Top Issue Labels
- bug (9)
- enhancement (5)
- Security Issue (2)
Top Pull Request Labels
- dependencies (89)
- github_actions (62)
- go (26)
- docker (1)
Package metadata
- Total packages: 3
- Total downloads: unknown
- Total dependent packages: 0 (may contain duplicates)
- Total dependent repositories: 0 (may contain duplicates)
- Total versions: 92
- Total advisories: 8
proxy.golang.org: github.com/goshs-labs/goshs/v2
- Homepage:
- Documentation: https://pkg.go.dev/github.com/goshs-labs/goshs/v2#section-documentation
- Licenses: mit
- Latest release: v2.1.6 (published 1 day ago)
- Last Synced: 2026-08-25T23:38:14.142Z (1 day ago)
- Versions: 23
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.55%
- Average: 4.703%
- Dependent repos count: 4.856%
proxy.golang.org: github.com/goshs-labs/goshs
- Homepage:
- Documentation: https://pkg.go.dev/github.com/goshs-labs/goshs#section-documentation
- Licenses: mit
- Latest release: v1.1.4 (published 6 months ago)
- Last Synced: 2026-08-25T23:45:45.935Z (1 day ago)
- Versions: 46
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.718%
- Average: 4.877%
- Dependent repos count: 5.035%
proxy.golang.org: goshs.de/goshs/v2
- Homepage: https://github.com/goshs-labs/goshs
- Documentation: https://pkg.go.dev/goshs.de/goshs/v2#section-documentation
- Licenses: mit
- Latest release: v2.1.6 (published 3 days ago)
- Last Synced: 2026-08-26T03:43:55.949Z (1 day ago)
- Versions: 23
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.838%
- Average: 5.0%
- Dependent repos count: 5.163%
-
Advisories:
- goshs has ACL Bypass & Path Traversal
- goshs has a Path Traversal issue
- goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite
- goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)
- goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)
- goshs: Share-link ?token=… redemption races past download limit
- goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags
- goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request
Dependencies
- github.com/gorilla/mux v1.8.0
- github.com/gorilla/websocket v1.4.2
- github.com/sirupsen/logrus v1.8.1
- golang.org/x/net v0.0.0-20211007125505-59d4e928ea9d
- github.com/davecgh/go-spew v1.1.1
- github.com/gorilla/mux v1.8.0
- github.com/gorilla/websocket v1.4.2
- github.com/pmezard/go-difflib v1.0.0
- github.com/sirupsen/logrus v1.8.1
- github.com/stretchr/testify v1.2.2
- golang.org/x/net v0.0.0-20211007125505-59d4e928ea9d
- golang.org/x/sys v0.0.0-20191026070338-33540a1f6037
- golang.org/x/sys v0.0.0-20201119102817-f84b799fce68
- golang.org/x/sys v0.0.0-20210423082822-04245dca01da
- golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1
- golang.org/x/text v0.3.6
- golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e
- actions/checkout v2 composite
- github/codeql-action/analyze v1 composite
- github/codeql-action/autobuild v1 composite
- github/codeql-action/init v1 composite
- actions/checkout v2 composite
- actions/setup-go v2 composite
- goreleaser/goreleaser-action v2 composite
- alpine latest build
- golang 1.24-alpine build
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/setup-go b7ad1dad31e06c5925ef5d2fc7ad053ef454303e composite
- codecov/codecov-action fb8b3582c8e4def4969c97caa2f19720cb33a72f composite
- golang * build
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/setup-go b7ad1dad31e06c5925ef5d2fc7ad053ef454303e composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- docker/build-push-action 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a composite
- docker/login-action dbcb813823bdd20940b903addbd779551569679f composite
- docker/setup-buildx-action bb05f3f5519dd87d3ba754cc423b652a5edd6d2c composite
- docker/setup-qemu-action 96fe6ef7f33517b61c61be40b68a1882f3264fb8 composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- github/codeql-action/upload-sarif e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 composite
- ossf/scorecard-action 2d1146689b8cda280b9bc96326124645441f03bc composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/download-artifact 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c composite
- actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
- snapcore/action-build 3bdaa03e1ba6bf59a65f84a751d943d549a54e79 composite
- snapcore/action-publish 214b86e5ca036ead1668c79afb81e550e6c54d40 composite