Single-binary file server for pentesters and sysadmins
Publisher’s description
What is goshs?
goshs by GoshsLabs is open-source Windows software in the servers & self-hosting category. It ranks 20th by popularity among servers & self-hosting in this catalogue. It is written in Go.
Installation and requirements
The publisher provides Portable installers for 64-bit, ARM64 and 32-bit Windows. It runs without installation (portable).
Updates and version history
The current version is 2.1.7, released on September 28, 2026. The version history goes back to May 12, 2026: 11 releases, all linked to the official files.
Popularity and file types
The Chocolatey package has been downloaded 202 times. The source code on GitHub (goshs-labs/goshs) has 993 stars. Similar programs include Caddy, Universal Media Server and Papercut SMTP.
Project description on GitHub: “Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
- Updated in the last two months
In short: goshs is an open-source servers & self-hosting tool for 64-bit, ARM64 and 32-bit PCs.
Is goshs safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
9F6A2EE1CE481AF10031B518A194F46E4BC38BCA295096FE6807BE6B2159AE62· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the goshs-labs/goshs repository on GitHub by the Open Source Security Foundation, last run on October 20, 2026.
- Dependency update tool10
- No dangerous workflows10
- No binaries in the repository10
- Security policy10
- Actively maintained10
- Restricted token permissions10
- Pinned dependencies10
- Licence declared10
- Published packages10
- Static code analysis10
- Tests in CI10
- No known vulnerabilities7
- Contributors from several organisations6
- OpenSSF Best Practices badge5
- Code review0
- Signed releases0
- Fuzzing0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 11 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 2.1.7Latest | September 28, 2026 | — | 64-bit ZIP32-bit ZIPARM64 ZIP |
| 2.1.6 | August 24, 2026 | — | 32-bit ZIP64-bit ZIPARM64 ZIP |
| 2.1.5 | August 2, 2026 | — | 64-bit ZIP32-bit ZIPARM64 ZIP |
| 2.1.4 | July 3, 2026 | — | 64-bit ZIPARM64 ZIP32-bit ZIP |
| 2.1.3 | June 25, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
| 2.1.2 | June 23, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
| 2.1.1 | June 17, 2026 | — | 64-bit ZIPARM64 ZIP32-bit ZIP |
| 2.1.0 | May 29, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
Install from the command line
Silent install ›winget install --id GoshsLabs.Goshs -echoco install goshs -yscoop install extras/goshsRelated guide: How to use winget: install and update apps
Also for other systems
brew install goshsInformation
- Publisher
- GoshsLabs
- Category
- Servers & self-hosting
- Licence
- MIT
- Price
- Free
- Source code
- github.com/goshs-labs/goshs
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- Portable
- Version
- 2.1.7
- Released
- September 28, 2026
- Added to the catalogue
- June 3, 2026
- Versions listed
- 11
- Chocolatey downloads
- 202
- GitHub stars
- 993
- GitHub forks
- 59
- winget ID
- GoshsLabs.Goshs
- Chocolatey package
- goshs
- Scoop package
- extras/goshs
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to goshs
See all ›-
Open source45.8K ↓ -
Universal Media Server15.8.2Universal Media Server is a DLNA-compliant UPnP Media Server. It is capable of sharing video, audio and images between most modern devices.Open source29.2K ↓ -
Open source28K ↓ -
Open source17.3K ↓ -
Plex1.115.0Plex is a global streaming media service and a client–server media player platform, made by Plex, Inc.Open source162.2K ↓ -
Open source3K ↓ -
Open source865 ↓ - jenkins2.587An automation server which enables developers around the world to reliably build, test, and deploy their software.Open source212.7K ↓
Frequently asked questions
Is goshs free?
Yes. goshs is open-source software under the MIT licence.
Is goshs safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install goshs with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does goshs run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of goshs?
The versions page lists all 11 versions with links to their official installer files, back to May 12, 2026.
Can I use goshs without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to goshs?
Caddy, Universal Media Server, Papercut SMTP, Jellyfin Media Player and Plex. The alternatives page compares them.
