Skip to content
Security
Skill

/wsdiscovery

WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.

From plugin
iothackbot
81113 skills
Install
$ npx -y skills add brownfinesecurity/iothackbot --skill wsdiscovery --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/wsdiscovery

Context preview

The summary Claude sees to decide when to auto-load this skill.

WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.

SKILL.md

wsdiscovery.SKILL.md
name: wsdiscovery
description: WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.

Wsdiscovery - WS-Discovery Protocol Scanner

You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.

Tool Overview

Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.

Instructions

When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:

1. **Understand the target**:

  • Ask for the target hostname or IP address
  • Determine if they want verbose output (full XML responses)
  • Decide on output format

2. **Execute the scan**:

  • Use the wsdiscovery command from the iothackbot bin directory
  • Basic usage: `wsdiscovery <hostname_or_ip>`
  • For verbose output: `wsdiscovery <hostname_or_ip> -v`
  • For JSON output: `wsdiscovery <hostname_or_ip> --format json`

3. **Output formats**:

  • `--format text` (default): Human-readable colored output with device details
  • `--format json`: Machine-readable JSON
  • `--format quiet`: Minimal output

What It Discovers

The tool extracts and displays:

  • IP addresses and ports
  • Endpoint references (device UUIDs)
  • Device types
  • Manufacturer information
  • Device names and models
  • Hardware versions
  • Serial numbers
  • Firmware versions
  • Location information
  • Service endpoints (XAddrs) - URLs for device management
  • Metadata versions

Examples

Discover devices on a specific host:

wsdiscovery 192.168.1.100

Discover with full XML responses:

wsdiscovery 192.168.1.100 -v

Output device information as JSON:

wsdiscovery 192.168.1.100 --format json

Scan network broadcast address to find all devices:

wsdiscovery 239.255.255.250

Important Notes

  • WS-Discovery uses multicast/broadcast discovery
  • Devices must support the WS-Discovery protocol to be found
  • Common with ONVIF cameras, printers, and network media devices
  • Service endpoints (XAddrs) can be used with onvifscan for further testing
  • The tool parses ONVIF-specific scope information when available
Read more
Ships withiothackbot

Open-source IoT security testing toolkit with integrated Claude Code skills for automated vulnerability discovery.

Get the whole plugin
Stats
811
Stars
123
Forks
Maintained
Maintenance
Python
Language
MIT
License
2mo ago
Last commit
8mo ago
Created

Repo: brownfinesecurity/iothackbot

Other skills on iothackbot.