Wsdiscovery
- 33 installs
- 805 repo stars
- Updated June 1, 2026
- brownfinesecurity/iothackbot
wsdiscovery is a Claude skill that scans networks with the WS-Discovery protocol to discover and enumerate ONVIF cameras and IoT devices.
About
This skill runs a WS-Discovery protocol scanner to discover and enumerate ONVIF cameras and other IoT devices on a network. A developer uses it during reconnaissance to find network video recorders and cameras that advertise themselves via WS-Discovery. It extracts device details like IP, UUID, manufacturer, firmware version, and service endpoints (XAddrs) for further testing.
- Scans networks using the WS-Discovery protocol
- Finds ONVIF cameras, NVRs, and IoT devices
- Extracts device UUIDs, firmware, serial numbers, and service endpoints
Wsdiscovery by the numbers
- 33 all-time installs (skills.sh)
- Ranked #1,467 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Jul 31, 2026 (Skillselion catalog sync)
wsdiscovery capabilities & compatibility
- Capabilities
- device discovery · onvif enumeration · network scanning
- Use cases
- security audit
- Platforms
- Linux
- Pricing
- Free
What wsdiscovery says it does
Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard.
It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.
Service endpoints (XAddrs) can be used with onvifscan for further testing
npx skills add https://github.com/brownfinesecurity/iothackbot --skill wsdiscoveryAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 33 |
|---|---|
| repo stars | ★ 805 |
| Last updated | June 1, 2026 |
| Repository | brownfinesecurity/iothackbot ↗ |
What it does
A tester scans a network to discover ONVIF cameras and pull their service endpoints for further testing.
Who is it for?
Discovering ONVIF cameras and WS-Discovery-enabled IoT devices during reconnaissance
Skip if: Devices that do not support the WS-Discovery protocol
When should I use this skill?
When you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network
What you get
A structured inventory of discovered devices with UUIDs, firmware, and service endpoints ready for further testing.
By the numbers
- 3 output formats: text, json, quiet
Files
Wsdiscovery - WS-Discovery Protocol Scanner
You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.
Tool Overview
Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.
Instructions
When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:
1. Understand the target:
- Ask for the target hostname or IP address
- Determine if they want verbose output (full XML responses)
- Decide on output format
2. Execute the scan:
- Use the wsdiscovery command from the iothackbot bin directory
- Basic usage:
wsdiscovery <hostname_or_ip> - For verbose output:
wsdiscovery <hostname_or_ip> -v - For JSON output:
wsdiscovery <hostname_or_ip> --format json
3. Output formats:
--format text(default): Human-readable colored output with device details--format json: Machine-readable JSON--format quiet: Minimal output
What It Discovers
The tool extracts and displays:
- IP addresses and ports
- Endpoint references (device UUIDs)
- Device types
- Manufacturer information
- Device names and models
- Hardware versions
- Serial numbers
- Firmware versions
- Location information
- Service endpoints (XAddrs) - URLs for device management
- Metadata versions
Examples
Discover devices on a specific host:
wsdiscovery 192.168.1.100Discover with full XML responses:
wsdiscovery 192.168.1.100 -vOutput device information as JSON:
wsdiscovery 192.168.1.100 --format jsonScan network broadcast address to find all devices:
wsdiscovery 239.255.255.250Important Notes
- WS-Discovery uses multicast/broadcast discovery
- Devices must support the WS-Discovery protocol to be found
- Common with ONVIF cameras, printers, and network media devices
- Service endpoints (XAddrs) can be used with onvifscan for further testing
- The tool parses ONVIF-specific scope information when available
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85FAQ
What does the wsdiscovery skill discover?
It finds WS-Discovery devices such as ONVIF cameras and NVRs and extracts IP, UUID, manufacturer, firmware version, serial number, and service endpoints.
What output formats are supported?
Text (default colored output), JSON via --format json, and minimal output via --format quiet.