2026-02-17 19:49:57 网络安全文章来源：ZONE.CI 全球网 0 阅读模式

文章总结： 本文介绍了一款名为Manspider的内网渗透工具，该工具专注于扫描SMB共享中的敏感文件，支持PDF、DOCX等格式及正则表达式内容搜索。文章详细列出了工具的命令参数与使用方法，并附带GitHub地址。文末包含红蓝对抗付费圈子推广，涉及免杀技术、钓鱼手法及红队工具资源分享。 综合评分： 65 文章分类： 内网渗透,安全工具,红队

cover_image

内网渗透工具–manspider

原创

Hello888 Hello888

安全天书

2026年2月14日 12:00 广西

0x01 工具介绍

扫描网络SMB共享中敏感文件，支持文件内容搜索 + 正则表达式！

支持的文件类型：

PDF
DOCX
XLSX
PPTX
任何基于文本的格式
还有更多！！

使用命令：

usage: manspider [-h] [-u USERNAME] [-p PASSWORD] [-d DOMAIN] [-l LOOT_DIR] [-m MAXDEPTH] [-H HASH] [-k] [-aesKey HEX] [-dc-ip IP] [-t THREADS] [-f REGEX [REGEX ...]] [-e EXT [EXT ...]]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[--exclude-extensions EXT [EXT ...]] [-c REGEX [REGEX ...]] [--sharenames SHARE [SHARE ...]] [--exclude-sharenames [SHARE ...]] [--dirnames DIR [DIR ...]]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[--exclude-dirnames DIR [DIR ...]] [-q] [-n] [-mfail INT] [-o] [-s SIZE] [-v]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;targets [targets ...]
Scan&nbsp;for&nbsp;juicy data&nbsp;on&nbsp;SMB shares. Matching files&nbsp;and&nbsp;logs&nbsp;are&nbsp;stored&nbsp;in&nbsp;$HOME/.manspider.&nbsp;All&nbsp;filters&nbsp;are&nbsp;case-insensitive.
positional arguments:&nbsp; targets &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IPs, Hostnames, CIDR ranges,&nbsp;or&nbsp;files containing targets&nbsp;to&nbsp;spider (NOTE:&nbsp;local&nbsp;searching also supported, specify directory name&nbsp;or&nbsp;keyword "loot"&nbsp;to&nbsp;search&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; downloaded files)
options:&nbsp;&nbsp;-h,&nbsp;--help &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;show this help message and exit&nbsp;&nbsp;-u,&nbsp;--username USERNAME&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; username&nbsp;for&nbsp;authentication&nbsp;&nbsp;-p,&nbsp;--password PASSWORD&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; password&nbsp;for&nbsp;authentication&nbsp;&nbsp;-d,&nbsp;--domain DOMAIN &nbsp; domain for authentication&nbsp;&nbsp;-l,&nbsp;--loot-dir LOOT_DIR&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; loot directory (default&nbsp;~/.manspider/)&nbsp;&nbsp;-m,&nbsp;--maxdepth MAXDEPTH&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; maximum depth&nbsp;to&nbsp;spider (default:&nbsp;10)&nbsp;&nbsp;-H,&nbsp;--hash HASH &nbsp; &nbsp; &nbsp; NTLM hash for authentication&nbsp;&nbsp;-k,&nbsp;--kerberos &nbsp; &nbsp; &nbsp; &nbsp;Use Kerberos authentication. Grabs credentials from ccache file (KRB5CCNAME) based on target parameters&nbsp;&nbsp;-aesKey,&nbsp;--aes-key HEX&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; AES key&nbsp;to&nbsp;use&nbsp;for&nbsp;Kerberos Authentication (128&nbsp;or&nbsp;256&nbsp;bits)&nbsp;&nbsp;-dc-ip,&nbsp;--dc-ip IP &nbsp; &nbsp;IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in the target parameter&nbsp;&nbsp;-t,&nbsp;--threads THREADS&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; concurrent threads (default:&nbsp;5)&nbsp;&nbsp;-f,&nbsp;--filenames REGEX [REGEX ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;filter&nbsp;filenames&nbsp;using&nbsp;regex (space-separated)&nbsp;&nbsp;-e,&nbsp;--extensions EXT [EXT ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;only&nbsp;show&nbsp;filenames&nbsp;with&nbsp;these extensions (space-separated, e.g. `docx xlsx`&nbsp;for&nbsp;only&nbsp;word&nbsp;&&nbsp;excel docs)&nbsp;&nbsp;--exclude-extensions EXT [EXT ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ignore files&nbsp;with&nbsp;these extensions&nbsp;&nbsp;-c,&nbsp;--content REGEX [REGEX ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;search&nbsp;for&nbsp;file content&nbsp;using&nbsp;regex (multiple supported)&nbsp;&nbsp;--sharenames SHARE [SHARE ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;only&nbsp;search&nbsp;shares&nbsp;with&nbsp;these names (multiple supported)&nbsp;&nbsp;--exclude-sharenames [SHARE ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; don't search shares with these names (multiple supported)&nbsp; --dirnames DIR [DIR ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; only search directories containing these strings (multiple supported)&nbsp; --exclude-dirnames DIR [DIR ...]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; don't&nbsp;search&nbsp;directories containing these strings (multiple supported)&nbsp;&nbsp;-q,&nbsp;--quiet &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; don't display matching file content&nbsp;&nbsp;-n,&nbsp;--no-download &nbsp; &nbsp; don't download matching files&nbsp;&nbsp;-mfail,&nbsp;--max-failed-logons INT&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; limit failed logons&nbsp;&nbsp;-o,&nbsp;--or-logic &nbsp; &nbsp; &nbsp; &nbsp;use OR logic instead of AND (files are downloaded if filename OR extension OR content match)&nbsp;&nbsp;-s,&nbsp;--max-filesize SIZE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; don't retrieve files over this size, e.g. "500K" or ".5M" (default: 10M)&nbsp; -v, --verbose &nbsp; &nbsp; &nbsp; &nbsp; show debugging messages&nbsp; --modified-after DATE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; only show files modified after this date (format: YYYY-MM-DD)&nbsp; --modified-before DATE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; only show files modified before this date (format: YYYY-MM-DD)

GitHub地址：

https://github.com/blacklanternsecurity/manspider

注意：请勿利用文章内的相关技术从事非法测试，由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。工具来自网络，安全性自测。

0x02 红蓝偶像练习生小圈子

圈子主要研究方向渗透测试、红蓝对抗、钓鱼手法思路、武器化作，红队工具二开与免杀。圈内不定期分享红队技术文章，攻防经验总结，学习笔记以及自研工具与插件，目前圈子已满300人，欢迎各位进圈子交流学习！****

**圈子目前更新相关技术文章：

* HeavenlyBypassAV内部版-轻松免杀各大杀软

Heavenly白加黑自动化生成免杀工具
冰蝎webshell免杀工具
哥斯拉webshell免杀工具
红队场景下lnk钓鱼Bypass国内AV
Frp免杀隧道工具
1day和0dayPOC
lnk钓鱼思路视频讲解
lnk钓鱼Bypass天擎
msi钓鱼
chm钓鱼
Kill360核晶
AV对抗-致盲AV（核晶）
捆绑免杀360
Kill火绒
火绒6.0内存免杀
kill-windows Defender
Defender分离免杀
Defender知识点
HeavenlyProtectionCS内部CS插件
EDR对抗思路
进程注入知识点
自启动思路
多种维权手法
Fscan免杀核晶
QVM解决思路
红队思路-钓鱼环境下小窗口截屏窃取
免杀Todesk/向日葵读取工具
渗透测试文章思路
内网对抗文章思路
还有更多红队思路文章！期待您的加入！！！**

免责声明：

本文所载程序、技术方法仅面向合法合规的安全研究与教学场景，旨在提升网络安全防护能力，具有明确的技术研究属性。

任何单位或个人未经授权，将本文内容用于攻击、破坏等非法用途的，由此引发的全部法律责任、民事赔偿及连带责任，均由行为人独立承担，本站不承担任何连带责任。

本站内容均为技术交流与知识分享目的发布，若存在版权侵权或其他异议，请通过邮件联系处理，具体联系方式可点击页面上方的联系我。

本文转载自：安全天书 Hello888 Hello888《内网渗透工具–manspider》