scada-hikvision-isapi

Name: scada-hikvision-isapi
Availability: InStock
Author: entrovyx

Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

3|1|Updated Jul 2, 2026

Search Tags:#iot #enumeration #recon #scada #hikvision #isapi

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill scada-hikvision-isapi-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: scada-hikvision-isapi
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/recon/scada-hikvision-isapi
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill scada-hikvision-isapi-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nmap, python3.

What problem does it solve?

This skill automates the discovery and enumeration of Hikvision ISAPI endpoints on industrial and IoT web interfaces, which are often overlooked by standard scanners.

Core Features & Use Cases

Endpoint Extraction: Automatically parses JavaScript bundles to map the complete API route tree of a target device.
Unauthenticated Probing: Tests for exposed sensitive endpoints, such as streaming channels, storage configurations, and user permissions, without requiring credentials.
Use Case: During a security assessment of a facility, use this skill to identify exposed camera streams or administrative interfaces on Hikvision NVRs or IP cameras.

Quick Start

Use the scada-hikvision-isapi skill to extract all available API endpoints from the target web interface at the specified URL.

Frequently Asked Questions about scada-hikvision-isapi

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enumerate Hikvision ISAPI endpoints on IoT devices?▼

To enumerate Hikvision ISAPI endpoints, this skill parses JavaScript bundles and probes REST/XML API paths to map the complete attack surface of target web interfaces. It automatically extracts available API routes without requiring credentials.

What is the best way to discover exposed camera streams on Hikvision NVRs?▼

Discovering exposed camera streams on Hikvision NVRs is done by unauthenticated probing of sensitive ISAPI endpoints, such as streaming channels and storage configurations, to identify exposed interfaces during security assessments.

Can I use nmap and curl to fingerprint SCADA web interfaces?▼

Yes, you can fingerprint SCADA web interfaces using nmap and curl. This skill requires both tools alongside python3 to perform endpoint extraction and unauthenticated probing of REST/XML API paths on industrial control systems.

How do I extract API routes from JavaScript bundles on IP cameras?▼

Extracting API routes from JavaScript bundles on IP cameras is automated by parsing the target web interface to map the complete API route tree. This process identifies all available endpoints without needing device credentials.

Does unauthenticated probing work for all Hikvision surveillance networks?▼

Unauthenticated probing works for testing exposed sensitive endpoints on Hikvision surveillance networks, but it is limited to discovering interfaces accessible without credentials. It applies to security assessments of industrial control systems and network-connected cameras.

Why does standard network scanning miss Hikvision ISAPI endpoints?▼

Standard network scanning misses Hikvision ISAPI endpoints because they are often overlooked by general scanners. This skill specifically targets and automates the discovery of these REST/XML API paths on industrial and IoT web interfaces.