一、利用SMBeagle遍历域下所有局域网地址

二、利用SMBLibrary查询指定IP的所有共享文件夹

var client = new SMB2Client();
            var success = client.Connect(System.Net.IPAddress.Parse("192.168.1.1"),
                SMBTransportType.DirectTCPTransport);
            // Success
            if (success)
            {
                var status = client.Login(String.Empty, "user", "pwd");
                // Success
                if (status == NTStatus.STATUS_SUCCESS)
                {
                    var shares = client.ListShares(out var actionStatus);
                    // **FAILURE : SMBLibrary.NTStatus.STATUS_USER_SESSION_DELETED**
                    foreach (var item in shares)
                    {
                        Console.WriteLine(item);
                    }
                    Console.ReadLine();
                }
            }

过滤可得所需共享文件夹路径

三、选定共享文件夹，利用net use或其他手段读取文件夹内容

class Program
    {
        static void Main(string[] args)
        {
            bool status = false;

            //连接共享文件夹
            status = connectState(@"\\10.200.8.73\share", "administrator", "11111111");
            if (status)
            {
                //共享文件夹的目录
                DirectoryInfo theFolder = new DirectoryInfo(@"\\10.200.8.73\share");
                //相对共享文件夹的路径
                string fielpath=@"\123\456\";
                //获取保存文件的路径
                string filename = theFolder.ToString() +fielpath ;
                //执行方法
                Transport(@"D:\1.jpg", filename, "1.jpg");
            }
            else
            {
                //ListBox1.Items.Add("未能连接！");
            }
            Console.ReadKey();
        }

        public static bool connectState(string path)
        {
            return connectState(path, "", "");
        }
        /// <summary>
        /// 连接远程共享文件夹
        /// </summary>
        /// <param name="path">远程共享文件夹的路径</param>
        /// <param name="userName">用户名</param>
        /// <param name="passWord">密码</param>
        /// <returns></returns>
        public static bool connectState(string path, string userName, string passWord)
        {
            bool Flag = false;
            Process proc = new Process();
            try
            {
                proc.StartInfo.FileName = "cmd.exe";
                proc.StartInfo.UseShellExecute = false;
                proc.StartInfo.RedirectStandardInput = true;
                proc.StartInfo.RedirectStandardOutput = true;
                proc.StartInfo.RedirectStandardError = true;
                proc.StartInfo.CreateNoWindow = true;
                proc.Start();
                string dosLine = "net use " + path + " " + passWord + " /user:" + userName;
                proc.StandardInput.WriteLine(dosLine);
                proc.StandardInput.WriteLine("exit");
                while (!proc.HasExited)
                {                   
                    proc.WaitForExit(1000);
                }
                string errormsg = proc.StandardError.ReadToEnd();
                proc.StandardError.Close();
                if (string.IsNullOrEmpty(errormsg))
                {
                    Flag = true;
                }
                else
                {
                    throw new Exception(errormsg);
                }
            }
            catch (Exception ex)
            {
                throw ex;
            }
            finally
            {
                proc.Close();
                proc.Dispose();
            }
            return Flag;
        }

        /// <summary>
        /// 向远程文件夹保存本地内容，或者从远程文件夹下载文件到本地
        /// </summary>
        /// <param name="src">要保存的文件的路径，如果保存文件到共享文件夹，这个路径就是本地文件路径如：@"D:\1.avi"</param>
        /// <param name="dst">保存文件的路径，不含名称及扩展名</param>
        /// <param name="fileName">保存文件的名称以及扩展名</param>
        public static void Transport(string src, string dst,string fileName)
        {
            FileStream inFileStream = new FileStream(src, FileMode.Open);
            if (!Directory.Exists(dst))
            {
                Directory.CreateDirectory(dst);
            }
            dst = dst  + fileName;
            FileStream outFileStream = new FileStream(dst, FileMode.OpenOrCreate);

            byte[] buf = new byte[inFileStream.Length];

            int byteCount;

            while ((byteCount = inFileStream.Read(buf, 0, buf.Length)) > 0)
            {
                outFileStream.Write(buf, 0, byteCount);
            }

            inFileStream.Flush();
            inFileStream.Close();
            outFileStream.Flush();
            outFileStream.Close();
        }
    }