https://cybertoolchain.io/tools/goshs New releases and features in goshs, tracked by The Cyber Toolchain. en Mon, 28 Sep 2026 07:17:05 GMT https://github.com/goshs-labs/goshs/releases/tag/v2.1.7 https://github.com/goshs-labs/goshs/releases/tag/v2.1.7 Mon, 28 Sep 2026 07:17:05 GMT goshs v2.1.7 enforces per-folder `.goshs` ACLs across SFTP/FTP/TFTP/SMB via `ProtocolACL` and adds folder upload to the web UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces `httpserver.ProtocolACL`, a fail-closed enforcer that wires per-folder `.goshs` ACL checks into every SFTP, FTP, TFTP and SMB read, write, list, rename, and handle-creation path — folders protected or blocked over HTTP are now denied outright on all protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds folder upload to the web UI: whole directory trees (including subdirectories) can be dragged, dropped, or selected for upload with structure preserved server-side; `..` path components and `.goshs` path segments are refused. • Extends all block-list and never-serve enforcement points across HTTP, WebDAV, SFTP and directory listing filters to compare names case-insensitively, closing bypasses on Windows and macOS filesystems. • Hardens the brute-force lockout so each per-IP attempt is counted inside the same locked section as the credential check, preventing concurrent requests from resetting the counter and bypassing the 5-failure lockout window. • Makes the `.goshs` ACL resolver fail closed: an unreadable, unparsable, or non-regular `.goshs` entry (including a dangling symlink or a directory named `.goshs`) now denies everything in the subtree rather than silently dropping inherited auth and block lists; `?mkdir` and uploads refuse any `.goshs` path component. Breaking changes: • Any `.goshs` entry that is a directory, dangling symlink, or otherwise non-regular file now causes the ACL resolver to deny all access to that subtree instead of returning an empty ACL. Setups that inadvertently had a `.goshs` directory will lose access to those paths on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.6 https://github.com/goshs-labs/goshs/releases/tag/v2.1.6 Mon, 24 Aug 2026 07:59:05 GMT goshs v2.1.6 replaces the shared clipboard with a persistent team chat supporting Markdown, emoji, reactions, image paste, and file upload across the web UI and TUI. • Adds `--persist-chat` (`-pc`) flag to write the full chat log (messages, edit flags, per-emoji reaction authors) to `<webroot>/.goshs-chat/chat.json` and restore it on restart; in-memory only by default. • Adds `--persist-chat-images` (`-pci`) flag to write base64-pasted images to disk under `.goshs-chat/` instead of inlining them. • Adds `--no-chat` (`-nc`) flag to disable the team chat entirely; replaces the old `--no-clipboard` flag. • Adds `POST /?chatUpload` endpoint for file attachment uploads via the chat button; files land in `.goshs-chat/` and are hidden from the directory listing; respects `--read-only`. • New live team chat replaces the non-persistent clipboard in both the web UI and the `--tui` dashboard (TUI authors as `tui@<host>`), synchronized over the websocket hub across all connected clients. • Chat supports Markdown rendering with ~1800 `:shortcode:` emoji, composer autosuggest, and collapsible long code blocks. • Chat supports emoji reactions with a who-reacted tooltip and in-place editing of own messages (↑ in the composer recalls and cycles them; edits flagged (edited)). • Chat supports image paste (inlined as base64 or written to disk) and opt-in desktop notifications ( toggle) for others' messages when the tab is hidden. • Enforces `--no-delete`/`--upload-only`/`--read-only` flags across SMB, TFTP, HTTP, and WebDAV write paths: overwrite, in-place write, truncate, and rename/move of pre-existing files are now refused as deletion-class operations. • WebDAV `LOCK`/`UNLOCK` operations are now blocked by `webdavGuard` when `--read-only` or `--upload-only` is set, preventing lock-null empty file creation that bypassed those modes. • Collaborator feed now unconditionally strips the `Authorization` header (alongside the CSRF token) at every call site, preventing per-directory ACL credential leakage to unauthenticated watchers. • ACL resolution (`findEffectiveACL`) now merges `.goshs` files up to the webroot — the nearest ancestor that sets `Auth` wins, and block lists are unioned — preventing a block-only child file from erasing a parent directory's auth requirement. Breaking changes: • The `--no-clipboard` flag is replaced by `--no-chat` (`-nc`); any scripts or configs using `--no-clipboard` will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.5 https://github.com/goshs-labs/goshs/releases/tag/v2.1.5 Sun, 02 Aug 2026 08:48:57 GMT goshs v2.1.5 adds a TUI password reveal popup with masked/plaintext toggle and clipboard copy. • Adds a password reveal modal in the `--tui` status bar: press `p` to open an overlay showing basic-auth credentials, `u` to toggle plaintext, `y`/`c` to copy, and `esc`/`q` to close. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.4 https://github.com/goshs-labs/goshs/releases/tag/v2.1.4 Fri, 03 Jul 2026 07:32:10 GMT goshs v2.1.4 adds TUI clipboard copy for reverse-shell payloads via y/c, with OSC 52 SSH support. • Adds one-key clipboard copy (`y`/`c`) in the `--tui` reverse-shell generator, pushing payloads to xclip/xsel, wl-copy, pbcopy, clip, or over SSH via OSC 52 (filling both system clipboard and X11 primary selection). • Restructures the `--tui` generator tab into a stacked layout so multi-line payload output can be mouse-selected without also grabbing menu entries. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.1.3 https://github.com/patrickhener/goshs/releases/tag/v2.1.3 Thu, 25 Jun 2026 13:50:58 GMT goshs v2.1.3 adds a TFTP server and a reverse-shell payload generator to its multi-protocol file-sharing toolkit. • Adds TFTP server support (`-tftp` / `--tftp-server`) serving files over UDP port 69 by default, with RRQ/WRQ (download/upload), `blksize`/`tsize` option negotiation, path-traversal rejection, IP whitelist enforcement, `--read-only`/`--upload-only` support, and mDNS advertisement. • Adds a reverse-shell payload generator tab in both the web UI and `--tui` dashboard, producing one-liners for Bash, nc, Python, PHP, PowerShell, Perl, Ruby, and more, with LHOST/LPORT substitution and optional URL or Base64 (`-EncodedCommand`) encoding. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.3 https://github.com/goshs-labs/goshs/releases/tag/v2.1.3 Thu, 25 Jun 2026 13:50:58 GMT goshs v2.1.3 adds TFTP server support and a reverse-shell payload generator with multi-language one-liners. • Adds TFTP server (`-tftp` / `--tftp-server`) serving files over UDP port 69 by default, supporting both downloads (RRQ) and uploads (WRQ) with `blksize`/`tsize` option negotiation, path-traversal rejection, IP whitelist enforcement, and mDNS advertisement. • Supports custom TFTP port via `-tftp-port` for unprivileged operation. • Adds a reverse-shell payload generator tab in the web UI and `--tui` dashboard, producing one-liners for Bash, nc, Python, PHP, PowerShell, Perl, Ruby, and more, with LHOST/LPORT substitution and optional URL/Base64 (`-EncodedCommand`) encoding. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.1.2 https://github.com/patrickhener/goshs/releases/tag/v2.1.2 Tue, 23 Jun 2026 14:10:17 GMT goshs v2.1.2 adds on-the-fly payload templating and resumable HTTP Range downloads. • Adds payload templating: serve files as Go templates rendered at download time, with `{{.VAR}}` placeholders substituted via `--template` and repeatable `--tpl-var KEY=VALUE` flags. • Supports HTTP Range requests for resumable and partial downloads of large files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.2 https://github.com/goshs-labs/goshs/releases/tag/v2.1.2 Tue, 23 Jun 2026 14:10:17 GMT goshs v2.1.2 adds on-the-fly payload templating and resumable HTTP Range downloads. • Adds payload templating: serve files as Go templates rendered at request time via the `?tpl` query parameter, with `--template` to enable and `--tpl-var KEY=VALUE` to inject per-engagement values (e.g. LHOST, LPORT) without editing files on disk. • Supports HTTP Range requests, enabling resumable and partial-content downloads of large files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.1.1 https://github.com/patrickhener/goshs/releases/tag/v2.1.1 Wed, 17 Jun 2026 18:51:32 GMT goshs v2.1.1 adds a full-screen TUI dashboard (--tui) and a TTL self-destruct timer (--ttl) for time-boxed engagements. • New `--tui` flag launches an interactive Bubble Tea terminal dashboard with live event panes for HTTP, DNS, SMB, LDAP, SMTP, Shells, and Clipboard — no web UI port-forwarding needed over SSH. • Clipboard management directly in the TUI: add (`a`), delete (`d`), and clear (`C`) entries without touching the web interface. • Save SMTP attachments to disk from the TUI with the `s` key. • Export any pane's event log to JSON from the TUI with `e` (current pane) or `E` (all panes). • New `--ttl` flag arms a graceful self-destruct timer using Go duration strings (`30m`, `2h`, `1h30m`); also settable as `"ttl": <seconds>` in the JSON config file. • TTL countdown is surfaced in the TUI status bar when `--ttl` is active. • `ConPtyShell.ps1` is no longer embedded in the binary; goshs now serves it on demand at `/ConPtyShell.ps1?conpty`, using a local webroot copy if present or downloading and caching from upstream — reducing antivirus false positives. Breaking changes: • `ConPtyShell.ps1` is no longer compiled into the goshs binary; Windows upgrade flows that relied on the embedded script must now ensure the route `/ConPtyShell.ps1?conpty` is reachable (it is exempt from authentication), or place a `ConPtyShell.ps1` in the webroot. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/goshs-labs/goshs/releases/tag/v2.1.1 https://github.com/goshs-labs/goshs/releases/tag/v2.1.1 Wed, 17 Jun 2026 18:51:32 GMT goshs v2.1.1 adds an interactive TUI dashboard and a TTL self-destruct timer, plus on-demand ConPtyShell delivery to cut AV noise. • Adds `--tui` flag: a full-screen Bubble Tea terminal dashboard with live panes for HTTP, DNS, SMB, LDAP, SMTP, reverse shells, and clipboard — operable over SSH without port-forwarding the web UI. • Enables interactive reverse shell management from the TUI: start/stop/restart listeners, attach to sessions, upgrade Unix shells to PTY (`u`) and Windows shells via ConPtyShell (`U`). • Supports clipboard management directly from the TUI: add (`a`), delete (`d`), and clear (`C`) entries; save SMTP attachments to disk (`s`). • Adds per-pane log export to JSON (`e` / `E`) from within the TUI dashboard. • Adds `--ttl` flag for graceful self-destruct after a Go duration string (`30m`, `2h`, `1h30m`, …) or via `"ttl": <seconds>` in the JSON config — useful for time-boxed engagements. • Changes ConPtyShell delivery: `ConPtyShell.ps1` is no longer embedded in the binary (reducing AV false positives) and is instead served on demand at `/ConPtyShell.ps1?conpty`, using a local webroot copy if present or downloading and caching from upstream otherwise. • New `/ConPtyShell.ps1?conpty` route is authentication-exempt, ensuring caught Windows hosts can always fetch the script. Breaking changes: • ConPtyShell.ps1 is no longer embedded in the goshs binary; setups that relied on the built-in ConPtyShell payload must now either place a ConPtyShell.ps1 in the webroot or ensure goshs can reach the upstream GitHub repository to download it on demand. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.9 https://github.com/patrickhener/goshs/releases/tag/v2.0.9 Wed, 27 May 2026 14:05:47 GMT goshs v2.0.9 adds FTP and SFTP server modes with public-key auth support • Adds FTP plain-text server mode via `-ftp` flag, listening on a configurable port (default 2121). • Adds SFTP mode via `-ftp-sftp` flag, upgrading the FTP server to SSH File Transfer Protocol. • Supports SFTP public-key authentication via `-fkf`/`--ftp-keyfile` (authorized_keys file) and `-fhk`/`--ftp-host-keyfile` (SSH host key). • Existing `-b` auth enforcement flag applies to both FTP and SFTP services. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.8 https://github.com/patrickhener/goshs/releases/tag/v2.0.8 Wed, 13 May 2026 14:10:39 GMT goshs v2.0.8 adds tab completion for bash, fish, and zsh via a single --completion flag. • Adds shell tab completion for bash, fish, and zsh via `--completion <shell>`, with automatic detection of macOS/Homebrew install paths. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.7 https://github.com/patrickhener/goshs/releases/tag/v2.0.7 Tue, 12 May 2026 13:18:28 GMT goshs v2.0.7 adds checksum-verified auto-updates, new Linux packages (.deb/.rpm), and Winget support. • Auto-update check now verifies downloads against MITM attacks using checksum validation. • Linux releases now ship with native `.deb` and `.rpm` packages for direct installation. • Windows releases now ship as `.zip` archives. • Adds Winget support: `winget install PatrickHener.Goshs`. • Adds installation support for Arch (AUR), openSUSE, Parrot OS, and NixOS. Breaking changes: • The `--update` flag is broken in v2.0.7 due to renamed release archives (e.g. `goshs_v2.0.7_linux_x86_64.tar.gz`); use `go install goshs.de/goshs/v2@latest` or manually replace the binary until v2.0.8. • Windows release archives changed from `.tar.gz` to `.zip`; any automation that fetches the Windows release by filename will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.6 https://github.com/patrickhener/goshs/releases/tag/v2.0.6 Wed, 29 Apr 2026 13:05:17 GMT goshs v2.0.6 adds Markdown preview in-browser, extended file previews, and collaborator log export for HTTP/DNS/SMB/LDAP/SMTP. • Adds in-browser rendering of `.md` files with syntax highlighting via the file preview panel. • Extends file preview support to additional data types including code and documents. • Enables export of collaborator panel logs (HTTP, DNS, SMB, LDAP, SMTP) for offline analysis. • Enhances `--update` to display rendered changelogs for every version between the current install and the latest release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.5 https://github.com/patrickhener/goshs/releases/tag/v2.0.5 Mon, 27 Apr 2026 13:51:20 GMT goshs v2.0.5 adds a full LDAP collaborator server with NTLM hash capture, JNDI/Log4Shell mode, and Windows support for the reverse shell catcher. • New `--ldap` flag launches a lightweight LDAP collaborator server for credential capture, supporting Simple bind (DN + cleartext password), SASL PLAIN, and full NetNTLMv2 challenge-response with inline hash cracking. • New `--ldap-jndi` flag puts goshs into Log4Shell exploitation mode, responding to any LDAP search with a `javaNamingReference` entry. • NTLM hash cracking outputs in hashcat format using a built-in default wordlist or a custom wordlist supplied via `--ldap-wordlist`. • LDAPS support via `-s -ss` (self-signed) or `-s -sc/-sk` (custom cert) automatically switches the LDAP port from 389 to 636. • All LDAP events (bind, search, NTLM) stream live to a new WebSocket-backed LDAP collaborator UI tab with cracked-password badges. • LDAP bind, search, and NTLM events are forwarded via webhook integration to Discord, Slack, or other targets. • The interactive reverse shell catcher is now fully cross-platform and builds and runs on Windows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.4 https://github.com/patrickhener/goshs/releases/tag/v2.0.4 Mon, 27 Apr 2026 06:11:05 GMT goshs v2.0.4 adds an interactive shell catcher with reverse shell listeners, shell upgrade, and a payload generator. • New interactive shell catcher for receiving and managing incoming reverse shell connections. • Built-in reverse shell listeners to catch callbacks without external tools. • Shell upgrade support to elevate caught shells to fully interactive TTYs. • Reverse shell payload generator inspired by revshells.com, built directly into goshs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.3 https://github.com/patrickhener/goshs/releases/tag/v2.0.3 Tue, 21 Apr 2026 13:13:57 GMT goshs v2.0.3 adds `-mu`/`--max-upload` flag to cap file upload size in bytes. • New `-mu`/`--max-upload` flag lets operators set a maximum upload size limit in bytes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.5 https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.5 Fri, 10 Apr 2026 13:09:11 GMT goshs v2.0.0-beta.5 adds a built-in SMB server that captures and cracks NetNTLMv1/v2+ESS hashes and serves files. • New built-in SMB server captures NetNTLMv2/v1+ESS challenge-response hashes from connecting clients. • Automatically attempts to crack captured hashes against username/domain permutations and an optional user-supplied wordlist. • SMB server doubles as a file-serving endpoint, delivering files over the SMB protocol alongside existing HTTP capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.4 https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.4 Thu, 09 Apr 2026 18:27:39 GMT goshs v2.0.0-beta.4 adds a `?redirect` query handler for purposeful URL redirects. • New `?redirect` query parameter handler lets you trigger intentional redirects — useful for CTF environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.2 https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.2 Mon, 30 Mar 2026 09:35:35 GMT goshs v2.0.0-beta.2 adds SMTP domain binding to prevent open-relay configurations. • Binds the built-in SMTP server to a specific domain via `--smtp-domain`, preventing open-relay creation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.1 https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.1 Wed, 25 Mar 2026 14:39:14 GMT goshs v2.0.0-beta.1 adds a Burp-style Collaborator tab with built-in DNS, SMTP, and HTTP logging for OOB exfiltration. • New Collaborator tab provides out-of-band interaction capture similar to Burp Collaborator. • Built-in DNS server catches DNS callbacks when your domain points to the goshs instance. • Built-in SMTP server captures inbound mail for exfiltration detection in CTF, CSRF, and XSS scenarios. • Full HTTP request log now surfaced in the Collaborator tab, replacing the need for `-V` verbose mode. • Complete UI/UX redesign with new templates, CSS, and JavaScript. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.1.4 https://github.com/patrickhener/goshs/releases/tag/v1.1.4 Fri, 13 Mar 2026 14:18:13 GMT goshs v1.1.4 adds localhost.run tunneling to expose your server through NAT/firewalls. • Adds built-in tunneling to localhost.run, making goshs publicly reachable even behind NAT or firewalls with no port-forwarding required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/1.1.3 https://github.com/patrickhener/goshs/releases/tag/1.1.3 Tue, 16 Dec 2025 09:39:04 GMT goshs 1.1.3 adds invisible mode and makes mDNS opt-in • New invisible mode hides the server from passive observers on the network • mDNS advertisement is now opt-in instead of opt-out, reducing unintended network exposure by default Breaking changes: • mDNS is now opt-in instead of opt-out — existing setups that relied on mDNS being enabled by default will no longer advertise unless the opt-in flag is explicitly set Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.7 https://github.com/patrickhener/goshs/releases/tag/v1.0.7 Mon, 19 May 2025 14:04:35 GMT goshs v1.0.7 adds SFTP protocol support and zeroconf mDNS broadcasting for HTTP, WebDAV, and SFTP. • Adds SFTP as a supported transfer protocol alongside HTTP and WebDAV. • Broadcasts HTTP, WebDAV, and SFTP services via zeroconf mDNS, making instances discoverable on the local network (e.g., `http://<hostname>.local:8000`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.4 https://github.com/patrickhener/goshs/releases/tag/v1.0.4 Fri, 02 May 2025 14:19:09 GMT goshs v1.0.4 adds delete-disable flag and webhook notifications for file operations • Adds ability to disable delete functionality, preventing file removal via the server. • Adds webhook support to receive notifications on basic file operations (upload, download, delete, etc.). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.3 https://github.com/patrickhener/goshs/releases/tag/v1.0.3 Wed, 16 Apr 2025 12:15:41 GMT goshs v1.0.3 adds YAML config file support and bcrypt password hashing for basic auth. • New YAML config file support lets you define all goshs settings in a config file, overriding CLI flags. • Basic auth now accepts bcrypt-hashed passwords in addition to plaintext. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.2 https://github.com/patrickhener/goshs/releases/tag/v1.0.2 Fri, 07 Mar 2025 07:58:36 GMT goshs v1.0.2 adds --no-clipboard option to create clean file-drop endpoints without the clipboard UI. • Adds `--no-clipboard` flag to disable and hide the clipboard widget in the UI, enabling a pure file-drop endpoint when combined with upload-only mode. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.1 https://github.com/patrickhener/goshs/releases/tag/v1.0.1 Fri, 22 Nov 2024 08:23:48 GMT goshs v1.0.1 adds file-based logging with -o/--output and PUT-based file uploads via curl. • Adds `-o`/`--output` flag to write goshs output to a file. • Supports HTTP PUT for file uploads, enabling `curl -T` workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v1.0.0 https://github.com/patrickhener/goshs/releases/tag/v1.0.0 Fri, 15 Nov 2024 10:52:22 GMT goshs v1.0.0 adds POST body logging with automatic JSON pretty-printing and base64 decoding in verbose mode. • Logs POST body content in verbose mode, including bodies sent to the server. • Automatically detects and pretty-prints JSON values found in request parameters and bodies. • Automatically detects and decodes base64-encoded values in request parameters and bodies before logging. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.4.0 https://github.com/patrickhener/goshs/releases/tag/v0.4.0 Fri, 05 Jul 2024 18:06:43 GMT goshs v0.4.0 adds support for using P12 files for TLS configuration • Adds `p12` file support for TLS Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.9 https://github.com/patrickhener/goshs/releases/tag/v0.3.9 Thu, 27 Jun 2024 12:59:16 GMT goshs v0.3.9 adds `-e` flag and compile-time embedded file support to serve bundled assets • Adds the `-e` CLI flag to display embedded files in the UI • Enables compiling static files into the binary via the `embedded/` folder and Makefile Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.8 https://github.com/patrickhener/goshs/releases/tag/v0.3.8 Tue, 30 Apr 2024 07:07:01 GMT goshs v0.3.8 adds Let's Encrypt HTTPS support and instant Dropzone uploads • Adds `-sle` flag to obtain Let's Encrypt certificates via CLI • Enables Drag-and-Drop file upload in the web UI without extra clicks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.6 https://github.com/patrickhener/goshs/releases/tag/v0.3.6 Fri, 01 Sep 2023 09:05:23 GMT goshs v0.3.6 adds copy-to-clipboard and file deletion actions • Adds copy to local clipboard for shared app clipboard • Adds ability to delete files individually or in bulk mode Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.5 https://github.com/patrickhener/goshs/releases/tag/v0.3.5 Wed, 21 Jun 2023 09:16:01 GMT Adds per-folder ACLs via `.goshs` files for content hiding and custom basic auth in goshs v0.3.5 • Adds `.goshs` config file support to enable custom per folder ACLs • Enables hiding content from directory listings using the `.goshs` file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.2 https://github.com/patrickhener/goshs/releases/tag/v0.3.2 Mon, 29 May 2023 08:29:13 GMT goshs v0.3.2 adds privilege dropping on Linux/MacOS and verbose Auth header logging • Adds ability to drop process privileges on Linux/MacOS for enhanced security • Adds Authorization header to verbose mode logs when present Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.3.0 https://github.com/patrickhener/goshs/releases/tag/v0.3.0 Tue, 28 Feb 2023 15:03:04 GMT goshs v0.3.0 adds `?json` query parameter to serve directory listings as JSON instead of HTML. • Adds support for the `?json` query parameter on all endpoints to return directory listings in JSON format • Mitigates slow loris attack against the server Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs https://github.com/patrickhener/goshs/releases/tag/v0.1.7 https://github.com/patrickhener/goshs/releases/tag/v0.1.7 Mon, 28 Feb 2022 13:01:49 GMT goshs v0.1.7 adds structured logging and client IP address output • `logrus` integration introduces structured logging support as a new capability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goshs