Goshs

v2.0.9 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 7d Offensive & Pentesting

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

capture-the-flag ctf devtools dns file-server file-transfer

+14 more

go http-server https-server kali-linux ldap ntlm offensive-security penetration-testing red-teaming security-tools sftp smb smtp-server webdav

Affected surfaces

auth

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds FTP and SFTP server support via --ftp and --ftp-sftp flags Adds FTP and SFTP server support via --ftp and --ftp-sftp flags Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Introduces `-ftp-port` option to set FTP/SFTP listening port (default 2121) Introduces `-ftp-port` option to set FTP/SFTP listening port (default 2121) Source: granite4.1:30b@2026-05-27-audit Confidence: high	—
Feature	Low	Adds `-fkf/--ftp-keyfile` for SFTP public key authentication Adds `-fkf/--ftp-keyfile` for SFTP public key authentication Source: granite4.1:30b@2026-05-27-audit Confidence: high	—
Feature	Low	Adds `-fhk/--ftp-host-keyfile` to specify SSH host key for SFTP Adds `-fhk/--ftp-host-keyfile` to specify SSH host key for SFTP Source: granite4.1:30b@2026-05-27-audit Confidence: high	—
Bugfix	Medium	Includes smaller bug fixes in this release Includes smaller bug fixes in this release Source: granite4.1:30b@2026-05-27-audit Confidence: high	—

Full changelog

What Changed in v2.0.9

FTP/SFTP

goshs now supports FTP (plain text) and the recently introduced SFTP. The flags are changed. --ftp starts the FTP plain text server and --ftp-sftp upgrades to SFTP.

FTP/SFTP server options:
  -ftp                          Activate FTP server capabilities          (default: false)
  -ftp-port                     The port FTP/SFTP listens on              (default: 2121)
  -ftp-sftp                     Switch to SFTP instead of plain FTP       (default: false)
  -fkf, --ftp-keyfile           Authorized_keys file for SFTP pubkey auth
  -fhk, --ftp-host-keyfile      SSH host key file for SFTP identification

-b still enforces auth for both services.

🐛 Bug Fixes

Smaller bug fixes are included in this release

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Goshs

Get notified when new releases ship.

About Goshs

All releases →

Related context

Related tools

Earlier breaking changes

v2.0.7 `--update` command is broken in this release.
v2.0.7 `--update` BROKEN! Update mechanism broken in v2.0.7.