https://goxterm.interloop.live:8443 for remote infrastructure management.
GoXterm bridges the gap between traditional desktop terminal emulators and heavy enterprise bastions. Access SSH, Telnet, Local Shell, SFTP files, and HTML5 Remote Desktop from any browser — protected by hardware-free bot defense, multi-factor authentication, and containerized access control.
Experience a full-featured, zero-install desktop environment inside your web browser. Seamlessly manage Linux servers, network switches, and Windows hosts.
Everything needed for secure daily operations, zero-maintenance bastions, and enterprise access control.
High-performance xterm.js terminal with pure-Go WebSocket bridge. Includes native SSH, pure-Go RFC 854 Telnet for legacy switches/routers, and integrated local shell console.
SSH • Telnet • Local ShellDirectly connect to Windows servers and virtual desktops via HTML5 RDP and VNC. Supports auto-resolution fitting, smart-sizing, clipboard syncing, and 1-click native mstsc.exe launch.
HTML5 RDP • VNC ViewerOrganize sessions into containers with fine-grained permission scopes: Private (creator only), Group (authorized team groups), and Public. Move sessions with one click.
Container Permissions • User GroupsPure-Go LDAP/AD client supporting LDAPS (Port 636) and StartTLS. Authenticate corporate domain credentials, extract group memberships, and auto-provision admin or operator roles.
LDAPS • StartTLS • AD IntegrationSecure every user with Multi-Factor Authentication: offline TOTP (Google/Microsoft Authenticator), Email OTP via outbound SMTP alerts, or SMS OTP to mobile phones. Includes air-gapped emergency disaster recovery.
TOTP • Email OTP • SMS OTPClient-side cryptographic Proof-of-Work (PoW) verification stops automated brute-force attacks and password sprayers in their tracks without requiring privacy-invasive Google reCAPTCHA.
Proof-of-Work • Anti-Brute-ForceIntegrated left sidebar SFTP browser for active sessions. Browse remote file hierarchies, drag-and-drop file uploads, download logs, and edit configuration files.
SFTP Browser • Session ImportAssist remote customers or team members without third-party tools. Generate 6-digit session PINs, share real-time screens, and chat interactively over an end-to-end WebSocket channel.
Screen Sharing • Live AssistanceIdeal for road warriors and home network admins. Automatically discovers dynamic public WAN IPs and alerts you by email whenever your residential or lab ISP rotates your address.
Public IP Discovery • Hourly DaemonBuilt-in encrypted password and note vault. Protect root passphrases, API tokens, and TLS private keys with native AES-256-GCM column encryption at rest. Features in-tab mask/reveal, one-click copy, and file export.
AES-256-GCM • Key & Cert Vault • Zero-Cloud
Enterprise OpenAI-compatible proxy (/v1) routing prompts to OpenAI, Anthropic, DeepSeek, or air-gapped local Ollama. Sub-millisecond pure-Go regex DLP intercepts and masks/blocks secrets, API keys, credentials, and internal IP leaks.
Multi-ecosystem caching proxy for Python (PyPI), Node.js (NPM), Go Modules, and Debian/Ubuntu (APT). Integrates real-time OSV.dev CVE intelligence to drop High/Critical supply chain vulnerabilities before they reach dev enclaves.
PyPI • NPM • Go • APT • Air-Gapped Cache
Full-featured on-call terminal access from any smartphone or tablet. Off-canvas navigation drawer, dynamic visual viewport (100dvh) that auto-resizes around soft keyboards, single-tap session launching, bottom-sheet modals, and a pinned quick-key accessory ribbon.
Guarantees emergency recovery superuser privileges cannot be exploited remotely. Strictly disabled by default, it requires physical server-side activation with configurable TTL expiry and instant single-use self-destruction upon login.
Single-Use Self-Destruction • Air-Gapped Trigger • Root DefenseLive GUI text editor for remote scripts, configs, and logs directly from SSH sessions with syntax highlighting (JSON, YAML, Bash, INI, Python, Markdown). Includes Side-by-Side Diff comparing original remote versions against local unsaved buffers, and remote file-to-file comparison with synchronized scrolling.
In-Browser GUI Editor • Side-by-Side Diff • Synchronized PanesPrivacy-conscious terminal command tracker aggregating your top 100 most frequent shell commands. Accessible from anywhere via Ctrl+Shift+H for instant search, 1-click execution (⚡ Run), pasting into the terminal buffer (📋 Paste), and starring mission-critical one-liners.
Usage Analytics • 1-Click Run • Pinned Production One-LinersPractical rules and workflows to maximize efficiency, protect credentials, and maintain Zero-Trust isolation across all your devices.
How you access GoXterm should depend on whether your client machine is a trusted personal workstation or an untrusted public computer.
10.x.x.x, 192.168.x.x) route through GoXterm. All other internet traffic (Google, SaaS, intranet) remains 100% direct with zero latency..bat (Windows) or .command (macOS) script to spawn an isolated browser profile configured exclusively for your active session..bat/.command scripts on public PCs. Unpacked files and proxy settings persist in local folders and can be recovered by subsequent users!Adopt these best practices during day-to-day operations to keep your infrastructure resilient against unauthorized access.
169.254.169.254) or loopback interfaces.Production/, Staging/) with granular RBAC permissions.ESC, TAB, ^C (kill process), sticky CTRL toggle, navigation arrows, |, /, -, ~, and soft keyboard focus.window.visualViewport and automatically resizes terminal rows and columns so terminal output is never obscured.Maximize daily engineering velocity with built-in zero-friction editing, visual diffing, and intelligent command history reference.
••• → Edit (or double-click) to open scripts, YAML configs, and server logs directly in the browser.Aa), whole-word boundaries (\b), regex support (.*), and one-click Replace All.••• → Compare with... on any file in the SFTP browser, then click a second file to immediately inspect a dual-pane visual difference view.localStorage with sensitive token/credential filters, keeping your credentials off the server.Quickly configure developer toolchains, AI assistants, and security policies with zero infrastructure friction.
GoXterm exposes an OpenAI-compatible /v1/chat/completions endpoint. Point any AI coding tool, IDE extension, or Python/Node SDK to GoXterm to enforce real-time DLP inspection before prompts leave your enclave.
Configure custom DLP regex rules, redaction actions (mask or block), and compliance exemptions directly via the GoXterm Web Console or authenticated Admin APIs.
🛡️ View DLP Admin API Specification in Admin Guide →Enclave build environments download packages from GoXterm's caching endpoints. Any library exhibiting High or Critical CVE vulnerabilities is rejected in real time with HTTP 403 Forbidden.
Inspect blocked vulnerability events, review package caches, and test new ecosystem libraries via the Admin Console or internal security APIs.
🛡️ View Supply Chain Admin API in Admin Guide →GoXterm was architected from day one to be safely exposed directly to the public internet.
ENC:v1:...). A decoupled 256-bit vault key ensures sensitive secrets remain unreadable even if raw SQLite databases are inspected.Zero telemetry. Fully offline Ed25519 cryptographic validation. No hidden cloud phone-home.
/v1) with inline regex DLP FirewallGoXterm licenses are signed with high-assurance Ed25519 asymmetric cryptography. The server verifies licenses purely using an embedded public key, guaranteeing zero outbound telemetry and 100% compliance in air-gapped enclaves.
Server Host ID (e.g. GOX-HOST-A1B2-C3D4).
GOXTERM-LIC-...) on your confirmation screen and delivers it via email.
Zero-dependency, standalone pre-compiled binaries. Extract and run with zero external prerequisites.
Windows 10, 11, Windows Server. Includes batch startup script & headless autostart service.
⬇ Download ZIP (x64)M1, M2, M3, M4 Macs. Native arm64 architecture with zero Rosetta emulation needed.
⬇ Download ZIP (arm64)Intel-based MacBooks, iMacs, and Mac Minis. Includes launchd daemon autostart scripts.
⬇ Download ZIP (x64)Ubuntu, Debian, RHEL, CentOS, Rocky Linux, Arch. Includes systemd autostart support.
⬇ Download tar.gz (x64)Raspberry Pi 4/5, AWS Graviton, Oracle ARM, embedded boards running 64-bit Linux.
⬇ Download tar.gz (arm64)Full source code, changelogs, checksums, and issue tracking hosted on GitHub.
🐙 View GitHub Releasestar -xzf goxterm-*.tar.gz in your target directory.start_GoXterm.sh (or .bat) to enable Gateway mode, set your initial admin password, or configure SMTP for dynamic IP tracking../start_GoXterm.sh and open https://localhost:8443 in any browser!