Scans networks for ONVIF-compliant cameras and IoT equipment using the WS-Discovery protocol.

Install

mkdir -p .claude/skills/wsdiscovery && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2457" && unzip -o skill.zip -d .claude/skills/wsdiscovery && rm skill.zip

Installs to .claude/skills/wsdiscovery

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.
209 chars✓ has a “when” trigger
Beginner

Key capabilities

  • Discover devices using the WS-Discovery protocol
  • Identify ONVIF cameras and IoT devices on a network
  • Extract device IP addresses, ports, and UUIDs
  • Retrieve manufacturer, model, serial number, and firmware information
  • Obtain service endpoints (XAddrs) for device management
  • Scan a specific host or a network broadcast address

How it works

The skill uses the wsdiscovery tool to implement the WS-Discovery protocol, sending multicast/broadcast requests to discover network devices. It then parses and displays information from devices that respond.

Inputs & outputs

You give it
Target hostname or IP address, optional verbose or JSON output format
You get back
Device IP addresses, ports, endpoint references, types, manufacturer, model, serial number, firmware, location, service endpoints, and metadata versions

When to use wsdiscovery

  • Discovering ONVIF network cameras
  • Scanning for IoT devices
  • Getting device manufacturer info

About this skill

Wsdiscovery - WS-Discovery Protocol Scanner

You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.

Tool Overview

Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.

Instructions

When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:

  1. Understand the target:

    • Ask for the target hostname or IP address
    • Determine if they want verbose output (full XML responses)
    • Decide on output format
  2. Execute the scan:

    • Use the wsdiscovery command from the iothackbot bin directory
    • Basic usage: wsdiscovery <hostname_or_ip>
    • For verbose output: wsdiscovery <hostname_or_ip> -v
    • For JSON output: wsdiscovery <hostname_or_ip> --format json
  3. Output formats:

    • --format text (default): Human-readable colored output with device details
    • --format json: Machine-readable JSON
    • --format quiet: Minimal output

What It Discovers

The tool extracts and displays:

  • IP addresses and ports
  • Endpoint references (device UUIDs)
  • Device types
  • Manufacturer information
  • Device names and models
  • Hardware versions
  • Serial numbers
  • Firmware versions
  • Location information
  • Service endpoints (XAddrs) - URLs for device management
  • Metadata versions

Examples

Discover devices on a specific host:

wsdiscovery 192.168.1.100

Discover with full XML responses:

wsdiscovery 192.168.1.100 -v

Output device information as JSON:

wsdiscovery 192.168.1.100 --format json

Scan network broadcast address to find all devices:

wsdiscovery 239.255.255.250

Important Notes

  • WS-Discovery uses multicast/broadcast discovery
  • Devices must support the WS-Discovery protocol to be found
  • Common with ONVIF cameras, printers, and network media devices
  • Service endpoints (XAddrs) can be used with onvifscan for further testing
  • The tool parses ONVIF-specific scope information when available

When not to use it

  • When devices do not support the WS-Discovery protocol
  • When a device is not an ONVIF camera or IoT device

Prerequisites

wsdiscovery tool from the iothackbot bin directory

Limitations

  • Only discovers devices that support the WS-Discovery protocol
  • Requires devices to advertise themselves via WS-Discovery
  • Does not perform actions beyond discovery and enumeration

How it compares

This skill specifically targets devices using the WS-Discovery protocol, such as ONVIF cameras and IoT devices, providing detailed enumeration beyond a general network scan.

Compared to similar skills

wsdiscovery side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
wsdiscovery (this skill)17moReviewBeginner
1password272moReviewIntermediate
senior-security317moReviewAdvanced
fix-dependabot-alerts186moReviewIntermediate

Try saying

Example prompts that trigger this skill in your AI assistant.

More by BrownFineSecurity

View all by BrownFineSecurity

apktool

BrownFineSecurity

Android APK unpacking and resource extraction tool for reverse engineering. Use when you need to decode APK files, extract resources, examine AndroidManifest.xml, analyze smali code, or repackage modified APKs.

713

ffind

BrownFineSecurity

Advanced file finder with type detection and filesystem extraction for analyzing firmware and extracting embedded filesystems. Use when you need to analyze firmware files, identify file types, or extract ext2/3/4 or F2FS filesystems.

16

iotnet

BrownFineSecurity

IoT network traffic analyzer for detecting IoT protocols and identifying security vulnerabilities in network communications. Use when you need to analyze network traffic, identify IoT protocols, or assess network security of IoT devices.

10

jadx

BrownFineSecurity

Android APK decompiler that converts DEX bytecode to readable Java source code. Use when you need to decompile APK files, analyze app logic, search for vulnerabilities, find hardcoded credentials, or understand app behavior through readable source code.

116

logicmso

BrownFineSecurity

Analyze digital and analog captures from Saleae Logic MSO devices. Decode protocols like UART, SPI, I2C from exported binary files. Use when analyzing logic analyzer captures for CTF challenges, hardware reverse engineering, or protocol decoding.

12

netflows

BrownFineSecurity

Network flow extractor that analyzes pcap/pcapng files to identify outbound connections with automatic DNS hostname resolution. Use when you need to enumerate network destinations, identify what hosts a device communicates with, or map IP addresses to hostnames from packet captures.

18

You might also like

1password

openclaw

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

2799

senior-security

davila7

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.

3191

fix-dependabot-alerts

microsoft

Fix Dependabot security alerts by updating vulnerable npm dependencies. Use when the user mentions "dependabot", "security alerts", "vulnerability", "CVE", or wants to update packages with security issues.

1872

red-team-tools-and-methodology

davila7

This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters.

759

trivy-offline-vulnerability-scanning

benchflow-ai

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.

14

prowler-compliance

prowler-cloud

Creates and manages Prowler compliance frameworks. Trigger: When working with compliance frameworks (CIS, NIST, PCI-DSS, SOC2, GDPR, ISO27001, ENS, MITRE ATT&CK).

13

Search skills

Search the agent skills registry