wsdiscovery
Scans networks for ONVIF-compliant cameras and IoT equipment using the WS-Discovery protocol.
Install
mkdir -p .claude/skills/wsdiscovery && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2457" && unzip -o skill.zip -d .claude/skills/wsdiscovery && rm skill.zipInstalls to .claude/skills/wsdiscovery
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.Key capabilities
- →Discover devices using the WS-Discovery protocol
- →Identify ONVIF cameras and IoT devices on a network
- →Extract device IP addresses, ports, and UUIDs
- →Retrieve manufacturer, model, serial number, and firmware information
- →Obtain service endpoints (XAddrs) for device management
- →Scan a specific host or a network broadcast address
How it works
The skill uses the wsdiscovery tool to implement the WS-Discovery protocol, sending multicast/broadcast requests to discover network devices. It then parses and displays information from devices that respond.
Inputs & outputs
When to use wsdiscovery
- →Discovering ONVIF network cameras
- →Scanning for IoT devices
- →Getting device manufacturer info
About this skill
Wsdiscovery - WS-Discovery Protocol Scanner
You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.
Tool Overview
Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.
Instructions
When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:
-
Understand the target:
- Ask for the target hostname or IP address
- Determine if they want verbose output (full XML responses)
- Decide on output format
-
Execute the scan:
- Use the wsdiscovery command from the iothackbot bin directory
- Basic usage:
wsdiscovery <hostname_or_ip> - For verbose output:
wsdiscovery <hostname_or_ip> -v - For JSON output:
wsdiscovery <hostname_or_ip> --format json
-
Output formats:
--format text(default): Human-readable colored output with device details--format json: Machine-readable JSON--format quiet: Minimal output
What It Discovers
The tool extracts and displays:
- IP addresses and ports
- Endpoint references (device UUIDs)
- Device types
- Manufacturer information
- Device names and models
- Hardware versions
- Serial numbers
- Firmware versions
- Location information
- Service endpoints (XAddrs) - URLs for device management
- Metadata versions
Examples
Discover devices on a specific host:
wsdiscovery 192.168.1.100
Discover with full XML responses:
wsdiscovery 192.168.1.100 -v
Output device information as JSON:
wsdiscovery 192.168.1.100 --format json
Scan network broadcast address to find all devices:
wsdiscovery 239.255.255.250
Important Notes
- WS-Discovery uses multicast/broadcast discovery
- Devices must support the WS-Discovery protocol to be found
- Common with ONVIF cameras, printers, and network media devices
- Service endpoints (XAddrs) can be used with onvifscan for further testing
- The tool parses ONVIF-specific scope information when available
When not to use it
- →When devices do not support the WS-Discovery protocol
- →When a device is not an ONVIF camera or IoT device
Prerequisites
Limitations
- →Only discovers devices that support the WS-Discovery protocol
- →Requires devices to advertise themselves via WS-Discovery
- →Does not perform actions beyond discovery and enumeration
How it compares
This skill specifically targets devices using the WS-Discovery protocol, such as ONVIF cameras and IoT devices, providing detailed enumeration beyond a general network scan.
Compared to similar skills
wsdiscovery side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| wsdiscovery (this skill) | 1 | 7mo | Review | Beginner |
| 1password | 27 | 2mo | Review | Intermediate |
| senior-security | 31 | 7mo | Review | Advanced |
| fix-dependabot-alerts | 18 | 6mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by BrownFineSecurity
View all by BrownFineSecurity →You might also like
1password
openclaw
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
senior-security
davila7
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
fix-dependabot-alerts
microsoft
Fix Dependabot security alerts by updating vulnerable npm dependencies. Use when the user mentions "dependabot", "security alerts", "vulnerability", "CVE", or wants to update packages with security issues.
red-team-tools-and-methodology
davila7
This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters.
trivy-offline-vulnerability-scanning
benchflow-ai
Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.
prowler-compliance
prowler-cloud
Creates and manages Prowler compliance frameworks. Trigger: When working with compliance frameworks (CIS, NIST, PCI-DSS, SOC2, GDPR, ISO27001, ENS, MITRE ATT&CK).