skills.rest
uphiago
uphiagoCOMMUNITY
Explore all skills by this author →
Website𝕏@uphiagoGitHub

scada-hikvision-isapi

Enumerate Hikvision ISAPI endpoints on SCADA and surveillance web interfaces.

1.1k|191|Updated Jun 24, 2026
Search Tags:#pentesting#scada#endpoint-enumeration#hikvision#isapi#iot-recon#camera-security
One-click install
npx skills add https://github.com/uphiago/recon-skills --skill scada-hikvision-isapi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: scada-hikvision-isapi
Source: https://github.com/uphiago/recon-skills/tree/main/recon/scada-hikvision-isapi
Command: npx skills add https://github.com/uphiago/recon-skills --skill scada-hikvision-isapi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of identifying hidden attack surface on Hikvision SCADA and IoT surveillance systems, where standard network scans fail to expose web-accessible ISAPI endpoints that can lead to unauthorized camera access, data leakage, or lateral movement in industrial networks.

Core Features & Use Cases

  • JavaScript Bundle Endpoint Extraction: Automatically pulls ISAPI route trees from client-side JS files served by Hikvision web interfaces to uncover hidden API paths.
  • Unauthenticated Endpoint Probing: Tests common ISAPI paths to identify live endpoints and decode error codes that confirm exposed services even without valid credentials.
  • Credential and Streaming Access Testing: Checks for default admin credentials and attempts to access camera snapshots, RTSP streams, and sensitive configuration endpoints like user permission lists.
  • Use Case: For a red team engagement targeting an energy sector client with Hikvision NVRs deployed on their industrial control network, use this Skill to quickly map all accessible ISAPI endpoints, test for default credentials, and identify unauthenticated access to live camera feeds or user permission data.

Quick Start

Use the scada-hikvision-isapi skill to enumerate all accessible Hikvision ISAPI endpoints on the target industrial web interface at https://target:port and test for unauthenticated access to camera snapshots and user permission data.

Frequently Asked Questions about scada-hikvision-isapi

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate Hikvision ISAPI endpoints during a SCADA pentest?▼

To enumerate Hikvision ISAPI endpoints during a SCADA pentest, this Skill extracts route trees from client-side JavaScript bundles and probes unauthenticated paths on industrial web interfaces to identify exposed attack surface.

Why does standard port scanning miss Hikvision IoT camera web interfaces?▼

Standard port scanning misses Hikvision IoT camera web interfaces because it does not parse client-side JavaScript or test unauthenticated ISAPI paths, which is necessary to uncover hidden API routes and exposed camera streaming endpoints.

Can I test default credentials on Hikvision NVRs without manual API documentation?▼

Yes, you can test default credentials on Hikvision NVRs without manual API documentation by using this Skill to automatically probe ISAPI endpoints and attempt access to sensitive configuration data like user permission lists.

What is the best way to find unauthenticated camera streaming endpoints in industrial control networks?▼

The best way to find unauthenticated camera streaming endpoints in industrial control networks is to enumerate Hikvision ISAPI routes using this Skill, which tests common paths for live RTSP streams and camera snapshots without requiring valid credentials.

Does this approach work for HikCentral Professional deployments in red team engagements?▼

Yes, this approach works for red team engagements targeting HikCentral Professional deployments, as the Skill is specifically designed to map accessible ISAPI endpoints, decode error codes, and identify exposed services across Hikvision surveillance systems.

When should I not use JavaScript bundle extraction for IoT recon?▼

You should not use JavaScript bundle extraction for IoT recon when the target Hikvision web interface lacks client-side JS files or blocks direct unauthenticated ISAPI probing, as the Skill relies on parsing these bundles to map hidden API paths.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

scada-hikvision-isapi

Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

Community
Intermediate
gabrielkoerichgabrielkoerich
5

intelbras

Automate monitoring and control of Intelbras alarm systems and cameras.

Community
Intermediate
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
uphiagouphiago
1.1k

hardcoded-credential-hunt

Detect hardcoded passwords in HTML forms, JavaScript, and API responses.

Community
Intermediate