content search dosn't work with other parameters specified

[dodiorne]

manspider servername -c Licensed --sharenames sharename -e xml txt bat config -d domain -u notmyid -p notmypassword -t 80 -f server --dirnames 2121772 conf_1 conf_2

when using the above command, it will not download any files. If I remove the -c parameter, it downloads just fine. This may not be an "issue" but by design but I wanted to understand if this is true and if you could share any reasons why to not implement this ability.

[TheTechromancer]

When you specify -c, only files with matching content will be downloaded.

[dodiorne]

ok. the files are not being downloaded. the files get downloaded to the temp folder but never get put in the loot directory for some reason. there are no errors in the debug logs when using -v. no parsing errors and no download errors. but if I manually check the files, that line is in there. "Licensed"

[TheTechromancer]

Hmm, do you get any highlighted "License" matches on the cli?

[dodiorne]

That is correct. If I don't search with sharename, the cli displays the hits and downloads the file.

…

________________________________ From: TheTechromancer ***@***.***> Sent: Wednesday, December 17, 2025 5:57 PM To: blacklanternsecurity/MANSPIDER ***@***.***> Cc: Derek Odiorne ***@***.***>; Author ***@***.***> Subject: Re: [blacklanternsecurity/MANSPIDER] content search dosn't work with other parameters specified (Issue #59) [https://avatars.githubusercontent.com/u/20261699?s=20&v=4]TheTechromancer left a comment (blacklanternsecurity/MANSPIDER#59)<#59 (comment)> Hmm, do you get any highlighted "License" matches on the cli? — Reply to this email directly, view it on GitHub<#59 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AIAS4LJAF2WUDPRKWO77HVT4CHNWJAVCNFSM6AAAAACPHWOCQWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTMNRXGUYTKOBQG4>. You are receiving this because you authored the thread.Message ID: ***@***.***> Confidentiality Notice: The content of this communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain confidential and legally privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of the information contained herein is strictly prohibited. If you have received this communication in error, please immediately delete the email from your system.

[TheTechromancer]

Hmm so it seems like an unintended interaction between --sharenames and --content? Since it only happens when both are enabled at the same time?

[dodiorne]

That is correct. it would be ideal and useful to be able to use both at the same time as it really narrows the scope of searching the files. not sure if there was a technical limitation on why it is this way or not.

…

________________________________ From: TheTechromancer ***@***.***> Sent: Friday, December 19, 2025 9:20 AM To: blacklanternsecurity/MANSPIDER ***@***.***> Cc: Derek Odiorne ***@***.***>; Author ***@***.***> Subject: Re: [blacklanternsecurity/MANSPIDER] content search dosn't work with other parameters specified (Issue #59) [https://avatars.githubusercontent.com/u/20261699?s=20&v=4]TheTechromancer left a comment (blacklanternsecurity/MANSPIDER#59)<#59 (comment)> Hmm so it seems like an unintended interaction between --sharenames and --content? Since it only happens when both are enabled at the same time? — Reply to this email directly, view it on GitHub<#59 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AIAS4LPEQDJ5UEN6QSA3F6T4CQCS7AVCNFSM6AAAAACPHWOCQWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTMNZVGI2TCOJYGI>. You are receiving this because you authored the thread.Message ID: ***@***.***> Confidentiality Notice: The content of this communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain confidential and legally privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of the information contained herein is strictly prohibited. If you have received this communication in error, please immediately delete the email from your system.

[TheTechromancer]

I'm accustomed to using these together on pentests and they've always worked fine. So it's strange. I'll see if I can reproduce.