https://goxterm.interloop.live:8443 for remote infrastructure management.
GoXterm bridges the gap between traditional desktop terminal emulators and heavy enterprise bastions. Access SSH, Telnet, Local Shell, SFTP files, and HTML5 Remote Desktop from any browser — protected by hardware-free bot defense, multi-factor authentication, and containerized access control.
Experience a full-featured, zero-install desktop environment inside your web browser. Seamlessly manage Linux servers, network switches, and Windows hosts.
Everything needed for secure daily operations, zero-maintenance bastions, and enterprise access control.
High-performance xterm.js terminal with pure-Go WebSocket bridge. Includes native SSH, pure-Go RFC 854 Telnet for legacy switches/routers, and integrated local shell console.
SSH • Telnet • Local ShellDirectly access remote GUI environments. Enjoy zero-install in-browser HTML5 VNC (via embedded noVNC) plus native 60 FPS RDP integration with dynamic .rdp profile generation, 1-click Windows launch, and zero-trust gateway tunneling.
HTML5 VNC • Native RDP LauncherOrganize sessions into containers with fine-grained permission scopes: Private (creator only), Group (authorized team groups), and Public. Move sessions with one click.
Container Permissions • User GroupsPure-Go LDAP/AD client supporting LDAPS (Port 636) and StartTLS. Authenticate corporate domain credentials, extract group memberships, and auto-provision admin or operator roles.
LDAPS • StartTLS • AD IntegrationSecure every user with Multi-Factor Authentication: offline TOTP (Google/Microsoft Authenticator), Email OTP via outbound SMTP alerts, or SMS OTP to mobile phones. Includes air-gapped emergency disaster recovery.
TOTP • Email OTP • SMS OTPClient-side cryptographic Proof-of-Work (PoW) verification stops automated brute-force attacks and password sprayers in their tracks without requiring privacy-invasive Google reCAPTCHA.
Proof-of-Work • Anti-Brute-ForceIntegrated left sidebar SFTP browser for active sessions. Browse remote file hierarchies, drag-and-drop file uploads, download logs, and edit configuration files.
SFTP Browser • Session ImportAssist remote customers or team members without third-party tools. Generate 6-digit session PINs, share real-time screens, and chat interactively over an end-to-end WebSocket channel.
Enterprise Bastion • Screen Sharing • Live AssistanceCombines the zero-friction experience of a native desktop terminal with the security of an enterprise gateway. Launches seamlessly on loopback with ephemeral single-use auto-login.
Zero-Friction Launch • Single-User FreeBuilt-in encrypted password and note vault. Protect root passphrases, API tokens, and TLS private keys with native AES-256-GCM column encryption at rest. Features in-tab mask/reveal, one-click copy, and file export.
AES-256-GCM • Key & Cert Vault • Zero-Cloud
Enterprise OpenAI-compatible proxy (/v1) routing prompts to OpenAI, Anthropic, DeepSeek, or air-gapped local Ollama. Sub-millisecond pure-Go regex DLP intercepts and masks/blocks secrets, API keys, credentials, and internal IP leaks.
Multi-ecosystem caching proxy for Python (PyPI), Node.js (NPM), Go Modules, and Debian/Ubuntu (APT). Integrates real-time OSV.dev CVE intelligence to drop High/Critical supply chain vulnerabilities before they reach dev enclaves.
Enterprise Security • PyPI • NPM • Go • APT Cache
Full-featured on-call terminal access from any smartphone or tablet. Off-canvas navigation drawer, dynamic visual viewport (100dvh) that auto-resizes around soft keyboards, single-tap session launching, bottom-sheet modals, and a pinned quick-key accessory ribbon.
Guarantees emergency recovery superuser privileges cannot be exploited remotely. Strictly disabled by default, it requires physical server-side activation with configurable TTL expiry and instant single-use self-destruction upon login.
Single-Use Self-Destruction • Air-Gapped Trigger • Root DefenseLive GUI text editor for remote scripts, configs, and logs directly from SSH sessions with syntax highlighting (JSON, YAML, Bash, INI, Python, Markdown). Includes Side-by-Side Diff comparing original remote versions against local unsaved buffers, and remote file-to-file comparison with synchronized scrolling.
In-Browser GUI Editor • Side-by-Side Diff • Synchronized Panes
Turns the command-line into a first-class interactive GUI. Hover over any file path in ls, git status, or compiler stack traces (e.g. main.go:42:15) and click to launch the file directly in the in-browser Remote Ace Editor jumped to that exact line and column—completely bypassing manual SFTP tree browsing!
Privacy-conscious terminal command tracker aggregating your top 100 most frequent shell commands. Accessible from anywhere via Ctrl+Shift+H for instant search, 1-click execution (⚡ Run), pasting into the terminal buffer (📋 Paste), and starring mission-critical one-liners.
Usage Analytics • 1-Click Run • Pinned Production One-LinersEnterprise high availability without the complexity of external clusters. Single-node standalone by default (<40MB RAM) with Day-2 clustering enabled via the Admin UI. Uses standard Keepalived Virtual IP (VIP) ingress routing, cryptographic join tokens, and an odd-numbered 3-node VRRP quorum architecture (priorities 102/101/100) for deterministic split-brain prevention without standalone witness daemons. Includes live WAL replication sync, graceful switchover, and disaster recovery force promotion.
Enterprise Clustering • Keepalived VIP • 3-Node Quorumapi_user)
Centralized Zero-Trust secrets management built directly into GoXterm with zero external daemon dependencies. Securely escrow API keys, database credentials, TLS certificates, and tokens with AES-256-GCM authenticated column encryption. Features dedicated headless machine accounts (api_user) strictly blocked from GUI login, scoped Bearer tokens with usage/TTL bounds, and trusted_hosts network CIDR allowlisting for CI/CD runners and microservices.
Practical rules and workflows to maximize efficiency, protect credentials, and maintain Zero-Trust isolation across all your devices.
How you access GoXterm should depend on whether your client machine is a trusted personal workstation or an untrusted public computer.
10.x.x.x, 192.168.x.x) route through GoXterm. All other internet traffic (Google, SaaS, intranet) remains 100% direct with zero latency..bat (Windows) or .command (macOS) script to spawn an isolated browser profile configured exclusively for your active session..bat/.command scripts on public PCs. Unpacked files and proxy settings persist in local folders and can be recovered by subsequent users!Adopt these best practices during day-to-day operations to keep your infrastructure resilient against unauthorized access.
169.254.169.254) or loopback interfaces.Production/, Staging/) with granular RBAC permissions.ESC, TAB, ^C (kill process), sticky CTRL toggle, navigation arrows, |, /, -, ~, and soft keyboard focus.window.visualViewport and automatically resizes terminal rows and columns so terminal output is never obscured.Maximize daily engineering velocity with built-in zero-friction editing, visual diffing, and intelligent command history reference.
••• → Edit (or double-click) to open scripts, YAML configs, and server logs directly in the browser.Aa), whole-word boundaries (\b), regex support (.*), and one-click Replace All.••• → Compare with... on any file in the SFTP browser, then click a second file to immediately inspect a dual-pane visual difference view.localStorage with sensitive token/credential filters, keeping your credentials off the server./ws/vnc endpoint with zero CGO dependencies.mstsc.exe or download pre-configured .rdp profiles with saved credentials, screen resolution, and audio redirection.goxterm-tunnel to proxy native Microsoft Remote Desktop through GoXterm's WebSocket gateway (/ws/rdp) without exposing raw port 3389 or running a VPN.api_user)
api_user accounts for CI/CD runners, pipelines, and microservices. The gateway strictly denies interactive web GUI logins (403 Forbidden) for machine accounts.trusted_hosts (e.g. 10.240.0.0/16, 192.168.1.50/32). Secret reveal requests originating outside allowed IPs are instantly rejected with 403 Forbidden.max_uses=1) for bootstrap automation, or client-side IP subnet locks.api_user Bearer tokens in an encrypted Note session and grant read-only folder access to specific operator groups (e.g. DevOps, SRE) without emailing plaintext tokens.••••••••), trigger a temporary reveal, or copy the payload straight to the clipboard with full audit logging.Quickly configure developer toolchains, AI assistants, and security policies with zero infrastructure friction.
GoXterm exposes an OpenAI-compatible /v1/chat/completions endpoint. Point any AI coding tool, IDE extension, or Python/Node SDK to GoXterm to enforce real-time DLP inspection before prompts leave your enclave.
Configure custom DLP regex rules, redaction actions (mask or block), and compliance exemptions directly via the GoXterm Web Console or authenticated Admin APIs.
🛡️ View DLP Admin API Specification in Admin Guide →Enclave build environments download packages from GoXterm's caching endpoints. Any library exhibiting High or Critical CVE vulnerabilities is rejected in real time with HTTP 403 Forbidden.
Inspect blocked vulnerability events, review package caches, and test new ecosystem libraries via the Admin Console or internal security APIs.
🛡️ View Supply Chain Admin API in Admin Guide →GoXterm features zero-friction Day-2 clustering. Start with a lightweight single-node instance (<40MB RAM) and scale seamlessly into a high-availability active-standby cluster directly through the Admin UI.
Open 🛡️ High Availability in the Admin UI, specify your Virtual IP (e.g. 192.168.1.100), interface (eth0), and assign Priority 102. Click Generate Join Token.
On secondary nodes, paste the cryptographically signed Join Token into the Join Existing Cluster wizard. Assign Priority 101 to Node 2 and Priority 100 to Node 3 to establish an odd-numbered VRRP quorum that prevents split-brain.
Download tailored keepalived.conf configurations directly from the Admin Dashboard for Nodes 1, 2, and 3. Keepalived probes /api/ha/health every 2 seconds, maintaining VIP ownership on the active primary and switching over automatically in <1 second.
GoXterm was architected from day one to be safely exposed directly to the public internet.
ENC:v1:...). A decoupled 256-bit vault key ensures sensitive secrets remain unreadable even if raw SQLite databases are inspected.A rigorous threat model detailing how an adversary attempts to breach the perimeter, APIs, or data stores, and the cryptographic, network, and identity controls neutralizing each vector.
| Attack Vector & Target | Adversary Strategy & Objective | GoXterm Defensive Countermeasure & Architectural Guard |
|---|---|---|
|
1. Credential Stuffing & Password Spray Gateway Perimeter |
Automated botnet spraying leaked credentials or dictionary combinations against /api/login to hijack administrator accounts. |
• Dual-Dimensional Rate Limiting: Enforces exponential IP lockouts (5 failures = 15m lockout, scaling to 24h jail) alongside per-username account freezes. • Proof-of-Work (PoW) Shield: Requires client browser to solve cryptographic SHA-256 challenge before submitting auth packets. • Mandatory 2FA / MFA: TOTP (RFC 6238), Email OTP, or SMS challenges block 99.9% of automated credential stuffing. |
|
2. Session Hijacking & Token Interception Client Web Portal |
Sniffing tokens over untrusted Wi-Fi, extracting session tokens from XSS payloads, or reusing stale cookies from public kiosks. |
• Zero Plaintext HTTP: Automatic TLS 1.3 with ACME / Let's Encrypt and strict HSTS headers. • Hardened Cookie Directives: Tokens marked HttpOnly, SameSite=Strict, and Secure.• Remote Invalidation: 1-click "Revoke Other Sessions" and automatic idle timeouts terminate session tokens on the server immediately. |
|
3. Leaked Machine Tokens (CI/CD / Git) API Identity |
An engineer accidentally commits an automated pipeline Bearer token (gox_sec_...) or API key to a public GitHub repository. |
• Zero-Trust Network Gating (trusted_hosts): Secret reveal requests originating outside authorized CIDR subnets (e.g. 10.240.0.0/16) are instantly rejected with 403 Forbidden.• Token Bounds: Enforces strict expiration TTLs, single-use counters ( max_uses=1), and client IP allowlists.• Headless api_user: Machine accounts are permanently blocked from web GUI logins (403 Forbidden).
|
|
4. Cold Database Exfiltration & Backup Theft Data at Rest |
An attacker exfiltrates raw SQLite database files (data/goxterm.db) via backup repository compromise or volume snapshot theft. |
• Decoupled Column AES-256-GCM: Host passwords, private keys, session notes, and vault secrets are encrypted with ENC:v1:... authenticated ciphertext.• Air-Gapped Key Decoupling: Master key ( data/.vault.key or GOXTERM_VAULT_KEY) is stored separately under strict 0600 permissions. Database files alone yield zero usable plaintext.
|
|
5. Broken Object Level Auth (BOLA / IDOR) Access Control |
Tampering with resource identifiers (e.g. GET /api/sessions/{other_id}) to inspect, reveal, or modify other teams' infrastructure secrets. |
• Cryptographic Scope Enforcement: All DB queries strictly join authenticated user_id and caller's RBAC group IDs.• Folder ACL Gating: Containers are enforced as private, group, or public. Cross-tenant tampering returns 403 Forbidden or 404 Not Found.
|
|
6. Server-Side Request Forgery (SSRF) Network Enclave |
Using the Web Bastion forward proxy to scan internal loopbacks (127.0.0.1) or cloud metadata services (169.254.169.254). |
• Automated Loopback & Metadata Drop: Integrated filter blocks all requests targeting loopback addresses, link-local metadata, or broadcast interfaces. • Just-In-Time (JIT) 2-Hour TTL: Target host access routes are granted dynamically upon session launch and expire automatically. |
|
7. Remote Shell & Command Injection Execution Path |
Injecting shell metacharacters (; rm -rf /; $(...)) into session names, parameters, or SFTP drawer file paths. |
• Native RFC 4254 SSH Channels: Direct binary SSH framing without shell command string wrapping (no sh -c execution).• Path Traversal Guards: SFTP and file download APIs resolve paths with filepath.Clean and strictly reject traversal (../).
|
|
8. Memory Corruption & Buffer Overflows Binary Integrity |
Exploiting heap overflows, use-after-free, or native library vulnerabilities (e.g. OpenSSL Heartbleed, Log4j). |
• 100% Pure Go (`CGO_ENABLED=0`): Type-safe, memory-managed compiled binary with runtime slice boundary checks and garbage collection. • Zero External Daemons: Single self-contained binary (<40MB) eliminating attack surfaces from Redis, external brokers, or unpatched C runtimes. |
|
9. AI Prompt Data Leakage (LLM DLP) Developer Enclave |
Engineers pasting proprietary API keys, database credentials, or customer PII into external AI completion prompts (Cursor, Continue). |
• Inline AI DLP Firewall: Integrated high-speed regex & Shannon entropy DLP engine (/v1/chat/completions) inspects outgoing prompts in real time and masks or blocks sensitive tokens before transmission.
|
|
10. Emergency Backdoor Exploitation Disaster Recovery |
Adversaries scanning the internet to probe emergency superuser recovery mechanisms (grand_admin). |
• Disabled by Default: Emergency break-glass access is dormant during normal operations. • Physical Host-Level Authorization: Activation requires direct server host CLI execution with time-limited TTL expiry. • Single-Use Self-Destruction: The trigger is atomically consumed and wiped upon login, locking the door behind the recovery session. |
Zero telemetry. Fully offline Ed25519 cryptographic validation. No hidden cloud phone-home.
/preview/...) & Web Proxy/v1) with inline regex DLP FirewallGoXterm licenses are signed with high-assurance Ed25519 asymmetric cryptography. The server verifies licenses purely using an embedded public key, guaranteeing zero outbound telemetry and 100% compliance in air-gapped enclaves.
Server Host ID (e.g. GOX-HOST-A1B2-C3D4).
GOXTERM-LIC-...) on your confirmation screen and delivers it via email.
Zero-dependency, standalone pre-compiled binaries. Extract and run with zero external prerequisites.
Windows 10, 11, Windows Server. Includes batch startup script & headless autostart service.
⬇ Download ZIP (x64)M1, M2, M3, M4 Macs. Native arm64 architecture with zero Rosetta emulation needed.
⬇ Download ZIP (arm64)Intel-based MacBooks, iMacs, and Mac Minis. Includes launchd daemon autostart scripts.
⬇ Download ZIP (x64)Ubuntu, Debian, RHEL, CentOS, Rocky Linux, Arch. Includes systemd autostart support.
⬇ Download tar.gz (x64)Raspberry Pi 4/5, AWS Graviton, Oracle ARM, embedded boards running 64-bit Linux.
⬇ Download tar.gz (arm64)Full source code, changelogs, checksums, and issue tracking hosted on GitHub.
🐙 View GitHub Releasestar -xzf goxterm-*.tar.gz in your target directory.start_GoXterm.sh (or .bat) to enable Gateway mode, set your initial admin password, or configure SMTP for dynamic IP tracking../start_GoXterm.sh and open https://localhost:8443 in any browser!