onvifscan

Test ONVIF devices for authentication vulnerabilities and weak credentials.

811|123|Updated Nov 17, 2025

Search Tags:#security #authentication #endpoint #onvif #camera #bruteforce

Ready to run

npx skills add https://github.com/BrownFineSecurity/iothackbot --skill onvifscan-brownfinesecurity

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: onvifscan
Source: https://github.com/BrownFineSecurity/iothackbot/tree/main/skills/onvifscan
Command: npx skills add https://github.com/BrownFineSecurity/iothackbot --skill onvifscan-brownfinesecurity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ONVIF-enabled devices, like IP cameras, often suffer from weak authentication and misconfigurations. This skill helps you assess ONVIF endpoints for authentication requirements and brute-force protection in a controlled, repeatable way.

Core Features & Use Cases

Auth Scan: Test authentication requirements on ONVIF endpoints.
Brute-Force: Attempt credential-based access with built-in wordlists or custom lists.
Flexible Output: Supports multiple formats to fit into security reports.

Quick Start

onvifscan auth http://192.168.1.100

Frequently Asked Questions about onvifscan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test ONVIF devices for authentication vulnerabilities?▼

Authentication testing on ONVIF devices checks for weak credentials and unauthenticated access. Run the auth subcommand against your target IP or URL to assess whether endpoints enforce authentication requirements and identify misconfigurations before attackers exploit them.

Can I brute-force credentials on IP cameras and IoT devices?▼

Yes, brute-force testing attempts credential-based access on ONVIF-enabled devices using built-in or custom wordlists. Rate limiting prevents device overload while systematically testing authentication strength across your network endpoints.

What output formats does ONVIF security testing support?▼

ONVIF device testing outputs results in both text and JSON formats, allowing flexible integration into security reports and downstream analysis workflows for compliance documentation or further processing.

Is ONVIF endpoint testing safe to run in production environments?▼

Yes, ONVIF security assessments use non-destructive authentication tests with rate limiting to prevent device disruption. This approach safely identifies vulnerabilities without affecting operational IP cameras or IoT device functionality.

Do I need special tools to scan ONVIF devices across different network configurations?▼

ONVIF scanning handles various network configurations and device types automatically. You only need the target URL or IP address; the tool manages authentication testing and brute-force attempts without additional setup per configuration.

uphiago

1.1k

iot-camera-recon

Identify exposed IoT cameras with unauthenticated config access, default credentials, and open RTSP streams.

Community

Intermediate

naporin0624

form-security-analyzer

Analyzes HTML forms for CSRF tokens, insecure actions, missing validation, hidden field exposure and misconfigurations, generating text or JSON reports.

Community

Intermediate